• The current Flatpak sandbox
• More sandboxing we want
• dbus
• SELinux
• Host changes needed
• Portals
• See also