• klu9@lemmy.caEnglish
    7·
    1 month ago

    I was under the impression Flatpaks are sandboxed. (I am not an expert.)

    Flatpak is a utility for software deployment and package management for Linux. It provides a sandbox environment in which users can run application software in (partial) isolation from the rest of the system.

    I also keep Ungoogled Chromium around as a last resort (AppImage in my case).

    • monogram@feddit.nlEnglish
      5·
      1 month ago

      Flatpaks are as sandboxed as the sandbox settings you give them, check out if the defaults are satisfactory on Flatseal before running it.

      • ddh@lemmy.sdf.orgEnglish
        2·
        1 month ago

        Even the author says Flatpak is a sandbox.

        The most simple but also least effective sandbox type is the container or wrapper sandbox that builds an isolated process environment and then executes the target application inside.

        Flatpak provides an isolated runtime environment using a container type sandbox to execute the target application inside.

        … there are two issues that prevent flatpak from providing a real sandbox environment…

        Just that it’s no true scotsman, I mean sandbox.

        • datte
          1·
          1 month ago

          Flatpak does provide the sandbox. It’s up to the developer to use it properly.

      • klu9@lemmy.caEnglish
        1·
        1 month ago

        Thanks for the info.

        Personally, I’ve been avoiding Flatpaks anyway on my main machine, but not out of security concerns. Mainly to do with size and the update frequency.