News for hackers. Stuff that matters.

A comment on Flatpak – a security nightmare. Parent comment

Re:Flatpak – a security nightmare by AgentME on Tuesday October 09, 2018 @06:27PM (#18180357)
The sandboxing platform could offer an API so a sandboxed program can spawn a privileged file-open dialog, and then the sandboxed program is only allowed to modify the file/directory that the user picked.

With the current situation, calling the programs sandboxed is completely misleading.

[ Parent | on HN ]
Re:Flatpak – a security nightmare by audidude on Tuesday October 09, 2018 @06:47PM (#18180477)
You've described the xdg-desktop-portal. Gtk apps just need to switch to GtkFileChooserNative and they get that for free. It does an FD pass of a FUSE fd and the app never gets file-system access.

It also has the benefit of using the KDE file-chooser on KDE, Windows file-chooser on Windows, mac, etc...

[ Parent | on HN ]