Flatpak – a security nightmare – 2 years later (2020)

Re:Flatpak – a security nightmare – 2 years later (2020) by harporoeder on Sunday March 21, 2021 @05:07AM (#26529138)

There is a mechanism for this called portals (1) available in flatpak. It gets integrated into the GUI toolkit, and certain applications are not supported. It is useful for things like accessing files from outside the default sandbox.

1. https://docs.flatpak.org/en/latest/portal-api-reference.html

[ Parent | on HN ]

Re:Flatpak – a security nightmare – 2 years later (2020) by its-summertime on Sunday March 21, 2021 @06:22AM (#26529409)

specifically, anything that uses the generic GTK/Qt way of accessing files via the file chooser will automagically use the portal

Anything that tweaks on that, most notably Electron, will not use the portal

[ Parent | on HN ]

Re:Flatpak – a security nightmare – 2 years later (2020) by akvadrako on Sunday March 21, 2021 @06:30AM (#26529433)

That's a choice of Electron - it could and should use portals.

[ Parent | on HN ]