you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 7 hours ago

So, the way I see it, there are three layers of managing security for sandboxes. There is the developer. There is the distribution system. And then, there is the user.

Flathub gives warnings at the top of each app's page. Ideally, they'd block publishing of apps that need a dangerous amount of permission, rather than just warning the user, but I understand why they don't. I think they need like a flatpak secure mode that removes dangerous settings when installing a flatpak, and then they add to the top of their pages which apps don't work with their safe installs.

I think then, that the future of flatpak security could evolve to alleviate the problems you mentioned. For one, as flatpak adoption increases, developers will end up at least looking at their flathub pages and have a desire to reduce those warnings.

Because right now, too much burden is placed on the user. I'm hoping that the technology will evolve to put all of the burden on the developer and the distribution system.

  • source
  • parent