keepassxreboot / keepassxc

KeePassXC is a cross-platform community-driven port of the Windows application “Keepass Password Safe”.
https://keepassxc.org/
Other
20.03k stars 1.42k forks source link

Snap: Remove $HOME access from keepassxc-proxy #10924

Closed JGCarroll closed 1 week ago

JGCarroll commented 2 weeks ago

keepassxc-proxy only requires access to the local Unix socket that's already granted by the baseline sandbox profile. The main application is responsible for manipulating the database and has its own permissions, the proxy itself doesn't need to touch user files.

Testing strategy

1) Build and install snap 2) Configure KeepassXC Browser integration and test that it functions as expected

This patch works fine with manual testing on Ubuntu 24.04.

Type of change