4 ms·
Flatpak is a good sandbox. It’s just they have to add a bunch of permissions in so that traditional style desktop apps can still function. You can crank the sec
by foxpurple 5y ago
Flatpak is a good sandbox. It’s just they have to add a bunch of permissions in so that traditional style desktop apps can still function. You can crank the security to max if you want but it isn’t very useful if gimp can’t open files.
So flapak let’s you say that gimp should have file system access or access to specific folders. But the blog author takes the existence of these permissions as flatpak being critically insecure.
- kaba0 5y agoI’m not sure - file access is but one (glaring) hole of linux security. How well does it work with eg. network, audio/video, etc?
- foxpurple 5y agoThere are permissions for both. You can disable network entirely and disable access to X11/Wayland. You can use flatpak to lock down things to the point you can’t do anything anymore.