Elektrine lite

← Feed

@sonny@floss.social

2023-06-04 00:11 UTC

To people who keep picking a specific app to "demonstrate" that the Flatpak sandbox is broken: This is called cherry picking. Nobody claimed the Flatpak sandbox was a magical solution. For certain things apps need upstream support, but hey everyone benefits from it! • We get proper and secure desktop APIs, yes also non Flatpak • Apps become more secure over time • More control to user over permissions and data • No random files in ~ #Linux #Flatpak

Replies (5)

  • @htotw@mastodon.social 2023-06-04 00:37

    @sonny@floss.social I’ve personally found the sandboxing to be too limiting to be usable more often than not enough sandboxing. For example, the Flatpack Firefox doesn’t support U2F keys.

    Open ##2738494

  • @jollyrogue@bsd.network 2023-06-04 01:19

    @sonny@floss.social Indeed. Flatpak was not conceptualized as a security thing, but security has been retrofitted on to it for good effect. @alcinnz@floss.social

    Open ##2738505

  • @quantum@mastodon.online 2023-06-04 07:21

    @sonny@floss.social gnome need a permission manager just like what we have in android as more and more distros having immutable variants and installed apps are as flatpak or snap.

    Open ##2738506

  • @mathew@universeodon.com 2023-06-04 17:35

    @sonny@floss.social “No random files in ~” Except for the entire .var directory Flatpak craps into ~ and won’t let you move.

    Open ##2738508

  • @loke@functional.cafe 2023-06-05 03:32

    @sonny@floss.social It's also the only practical solution we have at the moment that tries to do anything about avoiding giving absolute trust to random applications running on your system (short of running Qubes OS, which I do, but it takes a lot of discipline to use). Sure, there are things in Flatpak that could be better, but if you're going to advocate against it you should have a real suggestion what to use instead. And no, installing a deb or rpm and convince yourself that the software isn't going to do anything bad is not a valid answer.

    Open ##2738509