If only more Linux programs followed sandboxing best practices...

IverCoder@lemm.ee to Linux@lemmy.ml – 538 points –
i.imgur.com
95

You are viewing a single comment

This kind of thing could work for a few apps, say a color picker utility or a QR code generator etc.

Looking at the docs, it isn't clear if apps can write to their own namespace (instead of writing to user folders directly), but if they can, we could expand the scope to games like supertuxkart, 2048 etc, which would then be able to save user milestones and progress in their own area - a bit like how Android apps do it

https://docs.flatpak.org/en/latest/sandbox-permissions.html

It's a great start IMO, although admittedly there is still work to do. Flatpak atm bridges the gap with allowing new apps, requiring new libs, to run on older stable/LTS distros

Yes, they can. There are app-specific folders in .local that flatpaks can read and write to specifically for this purpose, and also the file picking dialog may give access to the one specific file you picked.

Android IMO has great usability in exposing a database to apps, which means they aren't required to ship their own database engine.

Get a database, data que and service mesh and we can have an advanced k8s style platform.