this post was submitted on 21 May 2026
235 points (99.6% liked)
Technology
84830 readers
4094 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Every program ideally should be in a sandbox and if it wants permission to access something it should have to ask for it.
Kind of like Android or iOS.
Flatpak tries to accomplish this on Desktop, and it works, but isn't as comprehensive as something like Android or iOS.
On the extreme side, there is QubesOS, which runs every app in a dedicated virtual machine, including the networking stack.
Flatpak also doesn't ask for permissions. If an app requires a new one does it just add it upon update?
I believe so.
I think either Bazaar or GNOME software center does tell you if an app asks for more permissions, I forgot which one though
GNOME Software. That's not what I'm concerned about though.
IIRC Discover on KDE also tells you on the update list. But only somewhere in the list of updates - theres no explicit dialog warning you of changes/new permissions
Is that what proton does on Linux?
No, that's just to make Windows programs/games run on Linux. But you can e.g. use the Flatpack version of Steam to Sandbox Steam and its games (https://docs.flatpak.org/en/latest/sandbox-permissions.html)
thanks, i didn't know that! i'll keep it in mind.