Normal apps that are not flatpak have more or less unrestricted permissions
#Manage app permissions?
cloud terrace
they just need to communicate with the kernel, one way or another. How it does so depends on the environment. It could use xorg or a wayland server.
or other methods
you can use something like AppArmor or SELinux to restrict permissions of software
clear frigate
I'm pretty sure just major web browsers can be tweaked for permissions in their own settings. That's it.
cloud terrace
"configured" is not the right word here. Rather, they need to be sandboxed in order to be restricted. Otherwise, they have more or less unrestricted permissions (unless you use something like AppArmor).
Note that security is worse on xorg than it is in wayland.
cloud terrace
On wayland, all clients are considered to be untrusted, which can be a bit annoying in some cases.