Nice, I guess a more sustainable strategy is to make *no* security promises as AppArmor does 😂

Good to know the situation as #manjaroarm use Flatpak on their #pinephone distro.

@EdwardTorvalds "Almost all popular apps on Flathub still come with filesystem=host or filesystem=home permissions, in other words, write access to the user home directory"

Isn't that fine? Gimp, VSCodium, PyCharm, Octave, Inkscape, Audacity, VLC all need to open files in your home directory, where else can it be sandboxed to that isn't a pain to reach?

Sign in to participate in the conversation

The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!