🛡️ "Stop Subverting Sandboxes"
with Michael Catanzaro at #GUADEC2025
📅 25 July 🕒 13:40 CEST 📍 Brescia

🔒 Flatpak can protect users—but not if we keep bypassing it. Michael calls for stronger sandboxing, better portals, and shares GNOME’s new security bounty program.

🔗 events.gnome.org/event/259/con…

#Flatpak #GNOME #Sandboxing #Security #FOSS

in reply to violetstone

@violetstone @soop Flatpak and GNOME do rely on runtime permissions in the form of Portals, similar to the permissions model on iOS and Android. There are a number of static permissions that had to exist to transition from an entirely unsandboxed model to a permissions model where we actually provide an API and user control over what apps can do.

flatpak.github.io/xdg-desktop-…

in reply to Cassidy James

@violetstone @soop for more background on the reality of the Flathub security model, I recommend reading this blog post; I wrote it to help explain it pretty in depth:

docs.flathub.org/blog/app-safe…

in reply to Cassidy James

@cassidy @violetstone @soop there is a talk happening at GUADEC in a couple of hours about exactly this! 😊

floss.social/@gnome/1148970708…


🛡️ "State of Portals"
with Georges Stavracas at #GUADEC2025
📅 25 July 🕒 11:40 CEST 📍 Brescia

🚪 Georges covers the current state and future of XDG Desktop Portals—essential for modern app developers.

🔗 events.gnome.org/event/259/con…

#GNOME #XDG #Flatpak #Portals #Linux #FOSS