On 4/7/21, Dan Ritter <d...@randomstring.org> wrote: >> riveravaldez wrote: >> >> Hi, I was under the impression that (besides being fully open) Flatpak >> had >> better confinement method that Canonical's Snap, anybody knows if this is >> correct? > > "Two years ago I wrote about then heavily-pushed Flatpak, > self-proclaimed "Future of Apps on Linux". The article > criticized the following three major flows in Flatpak: > > Most of the apps have full access to the host system but > users are misled to believe the apps are sandboxed > The flatpak runtimes and apps do not get security updates > Flatpak breaks many aspects of desktop integration" > > -- https://flatkill.org/2020/ > > (the article then says that they fixed some desktop integration > issues)
Hi, just in case anyone is interested in the following of this, I've asked at Flatpak's mail-list about the issues mentioned in that article and someone from GNOME pointed me to this post[0], which I still didn't read. So, at the moment, just reporting. ;) Best regards. [0] https://ramcq.net/2018/10/15/flatpak-sandbox-security/