GUI apps often come in Flatpak[1] these days - which are sandboxed[2] like you are expecting. Flathub[3] is the primary place to get GUI apps, but many distros also have their own app store too.

Flatseal[4] is a GUI that allows you to mange the sandboxes/permissions. You can also manage them via cli if you prefer.

For CLI apps, you can use distrobox[5] or toolbx[6].

[1] https://flatpak.org/

[2] https://docs.flatpak.org/en/latest/basic-concepts.html#sandb...

[3] https://flathub.org/en

[4] https://flathub.org/en/apps/com.github.tchx84.Flatseal

[5] https://distrobox.it/

[6] https://containertoolbx.org/

▲

3 hours ago | parent | next [-]

[deleted]

▲

Conan_Kudo 4 hours ago | parent | prev [-]

If you use KDE Plasma (like with Fedora KDE or Kinoite), you do not need Flatseal, as the functionality is integrated into System Settings.

	▲	Alupis 4 hours ago \| parent [-]
		Great tip - I do use KDE but didn't know this. Always just reached for Flatseal - but the functionality being integrated is even better. Very cool.