Hacker News Reader

Comment by Gigachad | Hacker News Reader

Does nix have any version of XDG portals for allowing programs to open file pickers without seeing the contents?

This seems like the killer feature of flatpak.

Why should sandboxing be part of package management? We should absolutely need sandboxes as non-android linux’s security is criminal, but that’s a separate issue in my opinion.

That’s how every other OS does it so it doesn’t seem like such a wild idea to me. Where else should it go?

No, the actual sandboxing is not part of the package managers

XDG portals are just APIs that applications can implement and use.

Regardless, do you not trust the applications that you run natively?

I mean I trust Firefox to not steal my data, or maybe $APP_NAME, but do I trust the C++ code? Or maybe it's an app that's been pwned a lot.

Sandboxing has uses other than running actively hostile apps (for which I'd argue this kind of sandboxing isn't enough).

I generally trust the applications that I run natively to not be malicious, but I don't always trust them to not step on each other's toes, or make a well-intentioned mess of things.

I don't assume that applications are inherently hostile, but I do not trust that the developer of every application I use to open untrusted input is sufficiently security conscious to prevent those applications from being subverted.

No, I absolutely do not trust the applications I run natively. I trust the hardware, the OS, and the sandboxing layer. Mostly because I have to. I absolutely do not trust Spotify or Steam with my personal documents

A “good” pdf reader only needs a bug and a bad pdf file.

https://github.com/nixpak/nixpak

The readme isn’t super clear how you use this. Is there some way I can for example use this to install Spotify with no file system, microphone, and camera access?

Reply on news.ycombinator.com