4 ms·
> Where on my smartphone I can grant an app access to only the one photo I need it to have access to, on Linux, for all I know every program that is running und
by KomoD 3y ago
> Where on my smartphone I can grant an app access to only the one photo I need it to have access to, on Linux, for all I know every program that is running under my user account may have uploaded all of my personal files to a malicious actor a thousand times over.
Flatpak
> Where on my smartphone I can deny an app access to my location, on my laptop any application can easily get my external IP address and a list of wifi access points and bluetooth devices.
Flatpak
> Why are Linux distros not keeping up and applying the principle of least privilege?
They're keeping up just fine?
- hollerith 3y agoCan you point to any kind of write-up (or video or audio) from an expert on security who has examined Flatpak? I always though that Flatpak's security properties rely on Linux container tech and that it is pretty easy for an attacker to break out of a Linux container (which is why Qubes uses VMs and why public cloud providers use VMs).