forked from Mirrors/flatpak-builder
e72beada8a
Instead of mounting our own sysfs instance we bind mount in only a subset of the /sys subdirectories from the host. This has several advantages: * If something was covered out in the host we will shadow that (i.e. the app will never see more of sysfs than non xdg-apps) * We can avoid showing some weird parts of sysfs, focusing on the device descriptions needed for e.g. mesa * Bind mounts are allowed in a non-root user-namespace, whereas the sysfs mount is not, taking us one step closer to that. |
||
---|---|---|
completion | ||
doc | ||
libglnx@d59a63e3e6 | ||
triggers | ||
.gitignore | ||
.gitmodules | ||
COPYING | ||
Makefile.am | ||
README.md | ||
autogen.sh | ||
configure.ac | ||
dbus-proxy.c | ||
org.freedesktop.systemd1.xml | ||
xdg-app-builtins-add-remote.c | ||
xdg-app-builtins-build-export.c | ||
xdg-app-builtins-build-finish.c | ||
xdg-app-builtins-build-init.c | ||
xdg-app-builtins-build.c | ||
xdg-app-builtins-delete-remote.c | ||
xdg-app-builtins-install.c | ||
xdg-app-builtins-list-remotes.c | ||
xdg-app-builtins-list.c | ||
xdg-app-builtins-make-current.c | ||
xdg-app-builtins-repo-contents.c | ||
xdg-app-builtins-repo-update.c | ||
xdg-app-builtins-run.c | ||
xdg-app-builtins-uninstall.c | ||
xdg-app-builtins-update.c | ||
xdg-app-builtins.h | ||
xdg-app-dbus-interfaces.xml | ||
xdg-app-dir.c | ||
xdg-app-dir.h | ||
xdg-app-helper.c | ||
xdg-app-main.c | ||
xdg-app-proxy.c | ||
xdg-app-proxy.h | ||
xdg-app-run.c | ||
xdg-app-run.h | ||
xdg-app-session-helper.c | ||
xdg-app-session.service.in | ||
xdg-app-utils.c | ||
xdg-app-utils.h | ||
xdg-app.gresource.xml |
README.md
xdg-app
xdg-app is a system for building, distributing and running sandboxed desktop applications on Linux.
See https://wiki.gnome.org/Projects/SandboxedApps for more information.