On Thu, Jun 16, 2016 at 08:55:16PM +0200, Alexander Larsson wrote: > Also, I'd like to point out that flatpak isn't always open wrt > sandboxing even now. Its possible to grant an app filesystem access, > and many currently do, but its also possible to run e.g. games without > filesystem access, and we do sandbox a lot of other things (pid > namespace, uid namespace, network access, filtered dbus access, seccomp > filtering, etc). Its just not currently realisting to not grant some > kind of filesystem access for apps that read user files until we finish > the work on the file selector portal.
Cool, thanks. -- Matthew Miller <[email protected]> Fedora Project Leader -- devel mailing list [email protected] https://lists.fedoraproject.org/admin/lists/[email protected]
