A Flatpak self-contained package development toolkit has announced that the STF (Sovereign Tech Fund) allocated €508,000 for funding the development and expansion of the project until the end of 2027. The funds will be used to eliminate platform limitations and create new XDG portals for secure access to external resources from an isolated environment. Among the new features expected to be implemented are:
- A mechanism for separating access to sockets, adding rules in WirePlumber to manage device access, and creating an XDG portal to configure access rights for sound. The developed functionality will separate permissions for recording and playback of sound, allowing access to speakers without access to the microphone.
- A granular application network isolation system from the host environment, allowing control over access at the network port level and utilizing abstractions such as host, local network, and global network.
- An XDG portal for VPN, allowing third-party VPN applications to manage network connections at the system-wide level.
- An XDG portal for spell checking, enabling the use of a single common dictionary across all applications in the system, including programs launched in isolated environments.
- An XDG portal for automatic password filling, addressing issues with the insecure use of the NativeMessaging service.
- A system that allows applications to declare the need for access to certain portals (for example, a program may request access to an external screen reader) to simplify the review of projects in application catalogs.
- An abstract system for declaring services provided by applications.
- Porting portals to the libdex library, adding integration tests, and improving permission request dialogs.
Forrás: opennet.ru
