search

flathub / org.gnome.Eolie

https://flathub.org/apps/details/org.gnome.Eolie
3 stars 3 forks source link

Remove --filesystem=home #20

Open nanonyme opened 5 years ago

nanonyme commented 5 years ago

This gives the application write access to home directory and allows executing arbitrary code outside sandbox through injection to eg .profile or other files. If the app really needs access to home, it should be read-only. Why does it need home access in the first place?

bellegarde-c commented 4 years ago

@nanonyme It's needed for bookmarks import, readonly should be ok. Or better, Firefox/Chromium/Chrome paths.

nanonyme commented 4 years ago

Yes, definitely exact paths to those is fine. It also makes intent more obvious to user.