search

flathub / com.sublimetext.three

https://flathub.org/apps/details/com.sublimetext.three
6 stars 4 forks source link

Remove access to org.gnome.SettingsDaemon #4

Open hadess opened 6 years ago

hadess commented 6 years ago

The correct D-Bus name is org.gnome.SettingsDaemon.MediaKeys, and host implementations should be fixed instead of allowing access to a potentially dangerous daemon. See: https://bugzilla.gnome.org/show_bug.cgi?id=781326#c8

TingPing commented 6 years ago

Considering this is a text editor, it might be using it for something more than MediaKeys.

hadess commented 6 years ago

The manifest says:

        "--talk-name=org.gnome.SettingsDaemon",

But:

The name org.gnome.SettingsDaemon was not provided by any .service files`

It might need to access another service under org.gnome.SettingsDaemon.* but it's hard to tell without access to the sources. I couldn't find what it might be using.