search

flathub / com.github.weclaw1.ImageRoll

https://flathub.org/apps/details/com.github.weclaw1.ImageRoll
0 stars 2 forks source link

Don't use filesystem=home #1

Open jannuary opened 3 years ago

jannuary commented 3 years ago

Image Roll has access to the user's entire home directory. This seems unnecessary, since Image Roll uses portals, so it's recommended to remove it for security purposes.

weclaw1 commented 3 years ago

Many users (including me) have images outside of the Pictures folder. Other image viewers on flathub (Eye of Gnome, Gwenview, XnView MP and others) use filesystem=host or filesystem=home.

jannuary commented 3 years ago

Hm, actually, on second thought, not having the permission for the entire directory breaks image switching (and when choosing files from portals, it doesn't work at all), so perhaps filesystem=home:ro is the best option for the time being.