Hacker News Reader

What's the sandboxing & app permissions story like on Sailfish OS? Is it just ordinary Linux, i.e. apps can basically do anything?

They use a custom-made Firejail-based solution called SailJail: https://github.com/sailfishos/sailjail