Comment by happymellon
8 hours ago
> it's not the default, nor is it easy.
That's really the main point for me. Flatpak could also a lot of this, but Flatseal isn't the default, nor is it easy for users.
MacOS has a bunch of switches for access, but they are hidden away inside the settings, and they are not granular.
If it's not the default, and it's not easy then it may as well not be there for most people.
> they are hidden away inside the settings, and they are not granular.
The switches default to off though, with a prompt on first attempt at accessing the protected resource.
The problem is that they're leaky like a sieve and the permission model and inheritance works is unclear (I once had the Terminal app ask me for permission - does it now mean anything I run from the terminal automatically inherits it - and so on).