4 ms·
Ideally, we get the best of both worlds. The isolation technology that Flatpak uses (bubblewrap) isn't exclusive to Flatpaked apps, so someone could probably ma
by smoldesu 3y ago
Ideally, we get the best of both worlds. The isolation technology that Flatpak uses (bubblewrap) isn't exclusive to Flatpaked apps, so someone could probably make a distro with isolation by-default if they were motivated enough.
> What distro would you recommend to somebody like me who wants to be asked before an application gets access
Use an immutable distro like Silverblue or Kinoite. Those are more-or-less Flatpak-only, extremely stable and fairly rigid with security.
- ElectricalUnion 3y ago> The isolation technology that Flatpak uses (bubblewrap) isn't exclusive to Flatpacked I wish flatpacked apps actually used the isolation (most don't, so http://flatkill.org/2020/ http://flatkill.org/2020/ is still true today) but that isolation is mostly under the control of the packager, not you. On this point, Deno ( https://docs.deno.com/runtime/manual/basics/permissions https://docs.deno.com/runtime/manual/basics/permissions ) and pledge.com ( https://justine.lol/pledge https://justine.lol/pledge ) are better; you have to explicitly allow-list what you want, instead of hoping that the potentially very untrustworthy and third-party packager had your best interests in mind and denylisting what you don't want.
- ForkMeOnTinder 3y agoMost casual users want to see a quick list of permissions and just click allow---not build their own allowlist for every app they download. If you want to build the allowlist yourself, doesn't firejail already do what you want?
- criddell 3y agoIt would be nice to grant permissions in a fine grained way and not just have a blanket accept or reject. For example, if I download a weather app, chances are it will want location and internet access. If I don't want it to have my precise location I should be able to deny location but grant access to the internet.