3 ms·
> The isolation technology that Flatpak uses (bubblewrap) isn't exclusive to Flatpacked I wish flatpacked apps actually used the isolation (most don't, so http
by ElectricalUnion 3y ago
> The isolation technology that Flatpak uses (bubblewrap) isn't exclusive to Flatpacked
I wish flatpacked apps actually used the isolation (most don't, so http://flatkill.org/2020/ http://flatkill.org/2020/ is still true today) but that isolation is mostly under the control of the packager, not you.
On this point, Deno ( https://docs.deno.com/runtime/manual/basics/permissions https://docs.deno.com/runtime/manual/basics/permissions ) and pledge.com ( https://justine.lol/pledge https://justine.lol/pledge ) are better; you have to explicitly allow-list what you want, instead of hoping that the potentially very untrustworthy and third-party packager had your best interests in mind and denylisting what you don't want.
- ForkMeOnTinder 3y agoMost casual users want to see a quick list of permissions and just click allow---not build their own allowlist for every app they download. If you want to build the allowlist yourself, doesn't firejail already do what you want?
- criddell 3y agoIt would be nice to grant permissions in a fine grained way and not just have a blanket accept or reject. For example, if I download a weather app, chances are it will want location and internet access. If I don't want it to have my precise location I should be able to deny location but grant access to the internet.