#Flatpak #Flatseal #Apppermissions #Sandbox #Security #Linux #Linuxsecurity #Linux #Opensource
https://ostechnix.com/how-to-easily-configure-flatpak-apps-permissions-with-flatseal/

@RAOF @Nouvanity agreed!

The person I was having my discussion with claimed flatpak was easily hackable (i.e. breaking out of the sandbox) in my earlier discussion today. I asked them to provide specific data (still waiting for them to circle back).

I've been under the impression #flatseal lets you tighten permissions further, and it is fairly secure, unless of course you give the flatpak access to your entire filesystem/home directory.

Any real vulnerabilities I'm not aware of?

#Flatseal 2.0 Released with GTK4/libadwaita UI

https://www.omglinux.com/flatseal-2-0-released-with-gtk4-libadwaita-ui/

@maximiliano #Flatseal 2.0 with #GTK4+#libadwaita port :)

https://github.com/tchx84/Flatseal/commit/49d2a550b5f21ca8dee64879f92c4f32a569d320

#Flatseal but with #GTK4+#libadwaita anyone? :)

Huge thanks to @maximiliano for the work!

https://github.com/tchx84/Flatseal/pull/515

Just in the middle of an #msteams #call today my headphones went silent with #flatpak #chrome on #debian #linux. After that I found that all audio support was broken when using flatpak chrome. Native (#deb) firefox was still okay, even other flatpak apps with audio (#signal) are still working correctly.

Seems to be a permissions issue with flatpak. But no tweaking in #flatseal would help.

Ideas, anyone?

@just_a_frog Hmmm. I suspect this is likely NOT the fault of #MicroOS per se, but instead is one of the liabilities of using #flatpaks i've long feared compared to nice comfy native repo pkgs. However, unless it's solvable, it entirely kills off any chance of any FP-predicated Immutable ever replacing my #ArchLinux

I diff files via kdiff3. It integrates well into Dolphin's context-menu... in my Arch #KDEPlasma . I tried ditto in M.OS; no integration! #Flatseal permissions didn't help. 👎 😠

@fossesq Oh how i simply hate #SELinux. Bloody awful thing. I just disable it, then keep using #Firejail like in my other distros. Mind you, given so far i don't use #flatpaks much [still primarily an #ArchLinux user], i've not yet needed to worry about including them under the FJ umbrella. #Flatseal then, i suppose?

If you are an app dev and playing with portals - such as the camera portal for #PipeWire / #libcamera - and miss a way to reset portal permissions in #gnome Settings: you can use #flatseal to do so https://flathub.org/apps/details/com.github.tchx84.Flatseal

How to manage flatpaks privileges with #Flatseal

https://linuxconfig.org/how-to-manage-flatpaks-privileges-with-flatseal

#linuxTips #foss #linux #fossTips #flatpak

While loading up on #Flatpak apps in #CentOS 9 Stream, I ran across something weird. Missings fonts? It only shows up in a few apps, but #Audacity and #FlatSeal were affected.

How weird!

First PoC #Flatpak build of @elk! You can build it yourself (see README.md) or download my prebuilt Flatpak bundle, if you trust me. It's missing the network permission yet, so use #Flatseal to add it. Also, login doesn't work (at least for me) :D

https://github.com/ljrk0/flathub/releases/tag/v0.1.0-alpha

Manage #Flatpak App Permissions Easily with #Flatseal
https://www.omglinux.com/manage-flatpak-permissions-using-flatseal-app/

Just got #Elk running on my #SteamDeck as an Edge app. Had to install #flatseal to get the shortcut and icon permissions working first. Ahhh Linux.

Something that I do not fully understand about #Flatpak permissions: Tools like #Flatseal allow restricting permissions of individual applications such as access to system and user files. But Flatseal itself is a Flatpak application, so wouldn’t any other application be able to change its (and other Flatpak applications’) permissions as well, hence making the restriction of permissions basically useless?

@frankiesaxx Also to note: #KDENeon does NOT have the #Ubuntu #SnapStore. It also doesn't have #UbuntuPro #advertisements in #Apt.

You can install #Snap packages in #Discover on KDE Neon, it's integrated out of the box but i only occasionally use #Flatpack apps with #Flatseal. I've no use for the Snap installs.

I don't think there's anything wrong with #Canonical or Ubuntu overall, if i used Ubuntu itself i'd remove the #Snap store and #Apt ads and i'd be fine with them.

Okay, just installed @usebottles via #Flatpak on #SteamDeck and used the (just updated) installer for #Ubisoft #Uplay Connect to install #Trackmania. Using #Flatseal I gave the permission to add the game to the #Steam library and can now launch it from the deck without even entering desktop mode.

Only minor gripe: The Trackmania icon is displayed in the desktop Steam library view but not in the Deck's view.

https://docs.usebottles.com/flatpak/cant-enable-steam-proton-manager

Ok, I did it by installing #Heroic launcher in desktop mode and letting the deck read and write to the sdcard with #flatseal

Heroic: https://www.makeuseof.com/how-to-install-and-play-epic-games-and-gog-titles-on-steam-deck/

Flatseal: https://flathub.org/apps/details/com.github.tchx84.Flatseal

In video: #Firetools, #Flatpak + #Flatseal, #Firefox/#Librewolf #Browser #Containers, and #PrivacyBadger.

All simple tools you can use to better improve your privacy.

What makes Privacy Badger unique is blocking based on tracker behavior. From the @EFF
.

Try it. 🙂

Now On Peertube:
(Tor friendly)

#Peertube #Video #privacy #sandboxing #Firejail #flatpak #flatseal #Tor #anonymity #anonymous
https://tube.tchncs.de/w/3KtNGjBPtETqSL42mP5BVa