search

flatpak / xdg-dbus-proxy

GNU Lesser General Public License v2.1
57 stars 21 forks source link

RFE: implement '*' suffix (different than '.*' suffix) #24

Open matthew-cline opened 3 years ago

matthew-cline commented 3 years ago

Use case: under KDE for an app add an icon to the systray requires that the app be able to own org.kde.StatusNotifierItem-PID-#. To make this work for an app sandboxed by Firejail requires using the .* suffix like so: dbus-user.own org.kde.*. This is giving way too much permission for just the sake of a systray icon.

Proposal: add a * suffix. foo.bar-* would match foo.bar-, foo.bar-baz and foo.bar-baz-quux but not foo.bar, foo.bar.baz or foo.bar.baz.quux. Then Firejail would be able to let a sandboxed app place a systray icon with dbus-user.own org.kde.StatusNotifierItem-*. While not perfect, it would be much less bad than dbus-user.own org.kde.*

matthiasclasen commented 1 year ago

Use case: under KDE for an app add an icon to the systray requires that the app be able to own org.kde.StatusNotifierItem-PID-#.

That is just broken, and should be fixed, not enabled.