[apparmor] Bug#865206: apparmor: Should apparmor abstractions allow flatpak directories?

[Vincas Dargis]

2017.07.01 00:56, John Johansen wrote:
> For a tighter policy where enumerating other application etc is not
> allowed then we would want to block access. I don't think we can do
> that well with applications like firefox until support for delegation
> lands.

Interesting, what is this mentioned "delegation" ?

Thanks.