Full file system read/write access is considered potentially unsafe

[amolenaar]

Full file system read/write access is considered potentially unsafe

[danyeaw]

Hey @amolenaar, that makes sense to me. Maybe the only thing I don't know about is something like saving to a USB drive.

[amolenaar]

Hmm.. If we restrict it to the home directory, it states "Home folder read/write access". Not sure if that's much better...

Gimp and Inkscape have the same "unsafe" condition listed.

It may be good enough to use Portals to access user data. Not sure if that requires extra configuration on our end.

[amolenaar]

If I drop the --filesystem=host option, I can open a model, but the path looks funny:

[danyeaw]

Closed by gaphor/gaphor#2891.

[amolenaar]

You want to drop filesystem permissions on our flathub image?

[danyeaw]

Hi @amolenaar, do you mean release a flatpak of Gaphor with these changes?

[amolenaar]

Yes (or the next release), where we remove filesystem permissions from the flatpak manifest.

[danyeaw]

Got it, I forgot we have to update the manifest in this repo as well.