Earlier quoted context omitted.
Ideally, we get the best of both worlds. The isolation technology that Flatpak uses (bubblewrap) isn't exclusive to Flatpaked apps, so someone could probably make a distro with isolation by-default if they were motivated enough. > What distro would you recommend to somebody like me who wants to be asked before an application gets access Use an immutable distro like Silverblue or Kinoite. Those are more-or-less Flatpa…
> The isolation technology that Flatpak uses (bubblewrap) isn't exclusive to Flatpacked I wish flatpacked apps actually used the isolation (most don't, so http://flatkill.org/2020/ is still true today) but that isolation is mostly under the control of the packager, not you. On this point, Deno ( https://docs.deno.com/runtime/manual/basics/permissions ) and pledge.com ( https://justine.lol/pledge ) are better; you hav…
If you want to build the allowlist yourself, doesn't firejail already do what you want?