• 1 Post
  • 80 Comments
Joined 1 year ago
cake
Cake day: August 13th, 2023

help-circle


















  • To 1.: dri instead of all would handle hardware-accelerated rendering. Then some webcams or controllers won’t be accessible though. This one’s a bit complicated, since the necessary portals for e.g. generic USB device access aren’t yet there.

    To 2.: portals should be used instead of that. Using them doesn’t require these permissions.

    To 3.: click on details and see. This is Flathub making it easy to understand for users.

    Permissions should make clear whatever dangerous things an app can do. If not, why do all this effort of isolation? Firefox could delete everything in downloads, either by accident on Mozilla’s side, or a privilege escalation. If the app used portals instead, it couldn’t, at least without user interaction. Or a browser security vulnerability could open up any USB devices to webpages. It’s all about what could happen with granted permissions. And these can 100 % be fixed in at least some way.