flatpak-builder/system-helper
Alexander Larsson 906b3b5871 dir: When pulling/deploying an app, support xa.extra-data-sources
If the downloaded app has a "xa.extra-data-sources" property in
the commit, then we download these as part of the pull operation
and store the result in the commitmeta object in the repo.

Then during deploy we look at the xa.extra-data-sources properties
again and extract them from the commitmeta into /app/extra
in the app, and afterwards we run /app/bin/apply_extra in a minimal
sandbox that has read-write access to /app/extra, but nowhere else.

There are some complexities:

We need to re-verify when extracting, because the commitmeta is not
really signed, so we could have picked up random stuff there
from the upstream repo, or from an attacker misusing the system-helper
local install codepath.

When using the system-helper the pull will fail if the commitmeta
is to large, so we have some code in this case to manually transfer
the larger commitmeta on the side to the local-pull code.
2016-10-21 08:57:42 +02:00
..
Makefile.am.inc Use upstream gettext 2016-07-15 11:58:46 -04:00
flatpak-system-helper.c dir: When pulling/deploying an app, support xa.extra-data-sources 2016-10-21 08:57:42 +02:00
flatpak-system-helper.service.in Rename everything but the on-disk location to flatpak 2016-05-09 11:11:55 +02:00
org.freedesktop.Flatpak.SystemHelper.conf Rename everything but the on-disk location to flatpak 2016-05-09 11:11:55 +02:00
org.freedesktop.Flatpak.SystemHelper.service.in tests: Add test-run-system.sh 2016-05-17 17:49:55 +02:00
org.freedesktop.Flatpak.policy.in system-helper: Fix typo in action description 2016-09-15 01:23:35 +08:00
org.freedesktop.Flatpak.rules.in Correctly handle --with-privileged-group 2016-05-24 14:13:34 +02:00