https://peertube.wtf/videos/watch/81a7326a-6d2e-4f90-bc89-6bb8b954018e How does Sailfish OS stop an app from reaching everything on your phone? Jasper looks inside Sailjail, the component that sandboxes applications and handles their permissions, and at Firejail, the Linux tool it builds on. Then he compares it with how Android, Flatpak and PureOS approach the same problem. In this episode: What Sailjail does, and how it relates to Firejail, The Linux mechanisms underneath: namespaces, seccomp-bpf and capabilities, What happens between tapping an icon and the app running in its sandbox, Where the rough edges are: permissions asked up front, a moment running as root, and all apps sharing one Linux user, How Android, Flatpak and PureOS do things differently, 0:00 Intro 1:34 What Sailjail does 3:33 Firejail and Linux security 8:25 What Sailjail adds 13:44 The rough edges 17:35 Other approaches 24:33 Sources and wrap-up Sources: github.com/sailfishos/sailjail github.com/sailfishos/sailjail-permissions blog.jolla.com/whats-up-with-sandboxing docs.sailfishos.org forum.sailfishos.org firejail.wordpress.com Host: Jasper snapp.technology Sat, 07 Nov 2026 05:57:01 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://peertube.wtf https://peertube.wtf/lazy-static/avatars/45856119-df14-4b5f-bff8-4807ae2cfbd2.png https://peertube.wtf/videos/watch/81a7326a-6d2e-4f90-bc89-6bb8b954018e All rights reserved, unless otherwise specified in the terms specified at https://peertube.wtf/about and potential licenses granted by each content's rightholder.