Hello. First post on PG, new to Linux. I’ve seen posts (as well as the PG Linux Overview page) about the security of KDE vs GNOME when it comes to application isolation and screen capture permissions, and it seems GNOME is more secure in this area because it shows a prompt that lets you choose whether to allow or deny an application from being able to capture your screen. Some on this forum have said that there are no inherent security risks on KDE compared to GNOME, while others have said that KDE not prompting the user to allow or deny screen capture is a “backdoor” that any Wayland app can use to take screenshots. Since I’m heavily leaning towards KDE as my desktop environment, I’m wondering if there’s a way to achieve a similar level of control on screenshots like in GNOME. I’m about to ask a few of beginner-y questions, so please bear with me.
I’m new to concepts like sandboxing, but I’ve seen folks online say that flatpak applications allow you to set permissions, including blocking screen capture. Does this effectively “solve” the screen capture capability issue? Also, I imagine an app “having screenshot permissions” means it can see content from other applications; does this work on a per-window basis or is it the entire screen?
I guess the most ideal way to manage app permissions is through something like SELinux, which is a whole topic to learn in itself. For the sake of this discussion, does SELinux allow you to set something like a system-wide block on applications having access to your screen/other applications?
Apologies for such a wordy post, but I imagine other beginners might also have these questions regarding KDE over GNOME as many of us are coming from Windows. This one security caveat seems pretty concerning to me, so I would appreciate some insight!