Home Assistant is reducing the permissions apps receive automatically, limiting what a compromised app could do. Stefan Agner’s new contributor guide asks maintainers to test their apps and explicitly declare any of the four affected Linux permissions they still need.
The change starts with new installations in Supervisor 2026.12. Existing installations keep their current defaults initially, with the reduced set applying to everyone no later than Supervisor 2027.05. Restoring a backup onto a new installation also uses the new defaults.
Maintainers can already test with the optional feature flags in Supervisor 2026.09.3 or newer. The permissions cover raw network access, creating device files, writing to the system audit log and granting executable files extra capabilities. The guide says most apps need none of them. Ping works in the tested Alpine and Debian app images, while custom network tools still need checking.