[gnome-weather/wip/cdavis/close-sandbox-holes] flatpak: Close sandbox holes




commit 72fb401613be571d5d4ff48d086ee4d1de8c92fe
Author: Christopher Davis <brainblasted disroot org>
Date:   Fri Oct 23 18:05:15 2020 -0700

    flatpak: Close sandbox holes
    
    Close the dconf hole and use fallback-x11.
    The dconf hole is no longer needed as there
    is a keyfile backend used by defaults
    in flatpaks.

 org.gnome.Weather.json | 8 ++------
 1 file changed, 2 insertions(+), 6 deletions(-)
---
diff --git a/org.gnome.Weather.json b/org.gnome.Weather.json
index 057c5a0..ad3d484 100644
--- a/org.gnome.Weather.json
+++ b/org.gnome.Weather.json
@@ -9,14 +9,10 @@
     ],
     "finish-args" : [
         "--share=ipc",
-        "--socket=x11",
+        "--socket=fallback-x11",
         "--socket=wayland",
         "--share=network",
-        "--system-talk-name=org.freedesktop.GeoClue2",
-        "--filesystem=xdg-run/dconf",
-        "--filesystem=~/.config/dconf:ro",
-        "--talk-name=ca.desrt.dconf",
-        "--env=DCONF_USER_CONFIG_DIR=.config/dconf"
+        "--system-talk-name=org.freedesktop.GeoClue2"
     ],
     "cleanup" : [
         "/include",


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]