3 ms·
Isn't that what Snap and Flatpak are doing? 1) Include dependencies (there can be shared runtimes but they don't mess up the host), 2) sandboxed by default and
by PhilippGille 3y ago
Isn't that what Snap and Flatpak are doing? 1) Include dependencies (there can be shared runtimes but they don't mess up the host), 2) sandboxed by default and you need to grant permissions.
E.g. Snap sandboxing: https://snapcraft.io/docs/security-sandboxing https://snapcraft.io/docs/security-sandboxing
- ElectricalUnion 3y agoIt mostly works except for the part 2 failing miserably; so many apps require full filesystem access to have sane behaviour it's not even funny. It doesn't help a lot that instead of having a explicit "can I have a host file" API, the apps are supposed to use a framework that invokes "portals".