3 ms·
flatpak can be considered similar to android API levels. if the app doesn't get updated to use the security provided by the latest versions (or xdg portals in f
by Iolaum 4y ago
flatpak can be considered similar to android API levels. if the app doesn't get updated to use the security provided by the latest versions (or xdg portals in flatpak case) but uses old API versions instead (like flatpak apps requesting wholesale home permission) security guarantees are not materialized.
Sounds like an ecosystem problem not specifically a flatpak problem.
And as Android's case has shown, moving the ecosystem forward, is not an easy task.
- jvschmidt 4y agoApps on Android cannot influence other Apps or even significant parts of the system. They are confined by default an can only use resources by using the API to request permission or they don't get access. On Linux Desktops any app can do whatever the user they run under is able to do and flatpaks don't change that since any restrictions can be circumvented trivially. The two systems dont really compare and Android is worlds ahead in regards to application security/sandboxing