[gnome-books/wip/hadess/gnome-books: 9/10] flatpak: Restrict files access



commit a04f9626aecd8cab08abf08a25b589eadb567968
Author: Bastien Nocera <hadess hadess net>
Date:   Fri Jan 25 09:43:47 2019 +0100

    flatpak: Restrict files access
    
    The nightly flatpak used to have access to "host". Given that we still
    rely on tracker to index the books, best restrict the files access to
    directories in the local home.

 flatpak/org.gnome.Books.json | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)
---
diff --git a/flatpak/org.gnome.Books.json b/flatpak/org.gnome.Books.json
index 482af8ec..818fe4cf 100644
--- a/flatpak/org.gnome.Books.json
+++ b/flatpak/org.gnome.Books.json
@@ -12,8 +12,7 @@
         /* Wayland access */
         "--socket=wayland",
         /* Read-only access to users documents */
-        /* Books can be outside xdg-dirs */
-        "--filesystem=host:ro",
+        "--filesystem=xdg-documents:ro", "--filesystem=xdg-download:ro",
         /* Needs to talk to the network: */
         "--share=network",
         /* Tracker access */


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]