4 ms·

> I really want to install apps without entrusting my entire hard drive to them. This is what macOS enforces - apps live within their containers.

• lewantmontreal 4y ago
  That sounds interesting. There must be apps that do require full access (like a finder alternative), so I wonder if you can know to trust an app to be isolated just by looking at it.
  • notriddle 4y ago
    Apps distributed through the App Store are required to be sandboxed. Apps you install from elsewhere may or may not be. https://developer.apple.com/library/archive/documentation/Security/Conceptual/AppSandboxDesignGuide/AboutAppSandbox/AboutAppSandbox.html https://developer.apple.com/library/archive/documentation/Se...
    • saagarjha 4y ago
      *New apps
      • duskwuff 4y ago
        "New" is a relative term. Sandboxing has been required on the Mac App Store for roughly ten years now -- I doubt there's anything left from before that requirement was enforced.
• kijiki 4y ago
  flatpak does this on Linux. There is an official-from Mozilla flatpak available for Firefox.
  • kiwijamo 4y ago
    It has some interesting side effects. For example Zoom links don't work in the Flatpack version of Firefox. Ironically the Zoom app Firefox tries to open is in itself a Flatpack app. Not sure if this is by design or if there is a way to fix it.