sailfishos / sailjail-permissions

Other
5 stars 17 forks source link

[Documentation] Unclear scope of "all apps" #126

Closed Olf0 closed 2 years ago

Olf0 commented 2 years ago

The fourth sentence of the Sailjail README currently states: "Target is to have application sandboxing enforced to all applications, starting from Sailfish OS 4.4.0."

llewelld commented 2 years ago

I'm not a sandboxing guru so someone may come along and correct me. However, my understanding of the suggestion to "have application sandboxing enforced to all applications" ¹ is that it meant any app that doesn't have either permissions or an opt-out specified, will be sandboxed by default anyway. This change was introduced in the 4.4.0 release.

Given this, and also given that the readme is now talking about an event in the past, maybe a better wording would be something like (just an initial suggestion):

"Since Sailfish OS 4.4.0 all applications that do not specifically opt-out or define permissions are sandboxed automatically using a default profile."

¹ This was also described in @vigejolla's sandboxing blog post as "we are planning to eventually sandbox all Sailfish apps by default".

llewelld commented 2 years ago

Here's that proposal in PR form: https://github.com/sailfishos/sailjail-permissions/pull/128