search

flathub / com.mojang.Minecraft

https://flathub.org/apps/details/com.mojang.Minecraft
32 stars 13 forks source link

Minecraft escaping sandbox #127

Open Goodname15 opened 2 years ago

Goodname15 commented 2 years ago

I have no idea, if this isn't just something to do with my System (Fedora Workstation Edition 36 with KDE 5.24.5), but when I start the launcher, pin it to the taskbar, close it and then try to launch it from there, it creates a .minecraft directory in my user folder (like non-flatpak would) and instead launches the launcher from there. Could of course also be a KDE issue cause doing the same thing under Gnome works fine...

AsciiWolf commented 2 years ago

Interesting, thanks for reporting this! It indeed looks like a KDE bug.

AsciiWolf commented 2 years ago

If this really is a KDE bug, it is quite a serious security issue as the app is probably running directly, bypassing the Flatpak sandbox. So, please report it upstream to KDE if possible. Thanks!

AsciiWolf commented 1 year ago

Is this still a problem on F37 with latest KDE?

tutacat commented 1 year ago

Did you install it using KDiscover? Did you add any manual permissions or links?

The flatpak can read the Downloads directory, and talk to discord, not sure if .minecraft directory is set.

If you are browsing from inside the launcher executable, then it will look like it's in the home folder, but that is only a link inside the flatpak environment to ~/.app/.../files/.minecraft