Germany's Sovereign Tech Fund invests €508,640 to harden Flatpak sandboxing

The German Sovereign Tech Agency has allocated €508,640 to advance the development and stewardship of Flatpak. This investment, delivered via the Sovereign Tech Fund (STF), seeks to close critical security and sandboxing gaps that have historically left Linux desktop software trailing behind the rigid security models of mobile platforms like iOS and Android.

Co-organized by Modal and supported by Para-Real Ltd., the initiative is a two-year project expected to run through the end of 2027. The funding targets specific technical deficits in how Flatpak handles permissions and system access. Key goals include the creation of new "Portals" to refine hardware and service access: an Audio portal to separate speaker and microphone permissions, a Network portal to isolate host networking, and a VPN portal for system-level connection management. Additionally, the project will develop portals for Password Auto-Fill and Writing Assistance to enable shared dictionaries.

Strengthening the Infrastructure

Beyond individual portals, the investment focuses on fundamental infrastructure improvements to how applications declare their needs. The project will implement a new "Entitlements" system to manage static permissions and an "Intents" system designed for service declaration and deep-linking. These changes are intended to move the platform toward a more granular and transparent permission model, reducing the attack surface for desktop applications.

Flatpak currently serves as the primary distribution method for several prominent image-based operating systems, including SteamOS, Fedora Silverblue, GNOME OS, and openSUSE Aeon. While it is the preferred format for major ecosystems like KDE, GNOME, and elementary, its sandboxing capabilities have lagged. According to the project organizers, this is largely due to the specialized expertise required for such work and the limited capacity of maintainers who are often overstretched.

The Path to Secure Desktops

This move is critical for the broader adoption of secure, image-based Linux operating systems. By resolving long-standing issues—such as the inability to grant an app access to the speakers without also granting it access to the microphone—the STF aims to make Free Software desktops competitive with modern mobile security standards. This shift is expected to significantly enhance user privacy and overall system robustness.

Long-term Capacity

This initiative follows a previous STF project involving GNOME during 2023 and 2024. Rather than providing a one-time fix, the current investment is designed to build long-term community capacity. By funding these developments, the agency intends to grow the pool of developers familiar with the platform stack, ensuring that the stewardship of Linux's primary distribution format is sustainable and technically rigorous as it evolves toward 2028.