By default, hide the user flatpak directory

This way you can't e.g. modify your or other applications
and runtimes. If you really need to to this, your
app can explicitly request access to this directory.
tingping/wmclass
Alexander Larsson 2016-11-14 10:22:57 +01:00
parent e1d1a29a6f
commit b19ea63526
1 changed files with 5 additions and 0 deletions

View File

@ -2250,6 +2250,7 @@ flatpak_run_add_environment_args (GPtrArray *argv_array,
gboolean home_access = FALSE;
GString *xdg_dirs_conf = NULL;
FlatpakFilesystemMode fs_mode, home_mode;
g_autoptr(GFile) user_flatpak_dir = NULL;
g_autoptr(GHashTable) fs_paths = g_hash_table_new_full (g_str_hash, g_str_equal, g_free, NULL);
if ((context->shares & FLATPAK_CONTEXT_SHARED_IPC) == 0)
@ -2443,6 +2444,10 @@ flatpak_run_add_environment_args (GPtrArray *argv_array,
flatpak_file_get_path_cached (app_id_dir));
}
/* Hide the flatpak dir by default (unless explicitly made visible) */
user_flatpak_dir = flatpak_get_user_base_dir_location ();
add_hide_path (fs_paths, flatpak_file_get_path_cached (user_flatpak_dir));
add_file_args (argv_array, fs_paths);
if (home_access && app_id_dir != NULL)