4 ms·
> Not when you don't have access to their home directory and all your file accesses are via XDG portals. > Modifying system-wide desktop files is a privileged
by buildzr 7y ago
> Not when you don't have access to their home directory and all your file accesses are via XDG portals.
> Modifying system-wide desktop files is a privileged operation and flatpak's filesystem namespacing prevents applications from messing with the launchers in your home directory.
Okay, but let's jump over to reality for a second, no one uses Flatpak and your desktop shortcuts are on your desktop, not the system one, so are your other commonly invoked applications, due to the unnecessary complexity Flatpak introduces I feel it's unlikely to see widespread adoption in the near future.
> GDM launches your session and is outside your control as an unprivileged user and if the compositor dies so does your session. You can't 'swap' it and your malicious compositor can never be shown as a choice in GDM since those preferences require root to modify.
Did they change it so GDM no longer prefers your ~/.xinitrc if available?
You may also be able to LD_PRELOAD the compositor from your ~/.xprofile, but I haven't done any experiments there.
> Yep, which is why apps won't have access to it except for the files the users chooses to give the application via a system dialog.
This entire concept is nothing more than an annoying joke not widely deployed on any desktop system today.
Consider also that such an extreme level of sandboxing could also prevent malicious access to your tmux session and prevent this issue entirely in such a case, so why would this even be considered a problem if you're talking about that level of sandboxing?
Perhaps I was a too dismissive of it - but in any case it's a complete change of security model and its not clear that tmux is what would be at fault under such a model or if something else would be expected to protect it's session from access. Maybe some magic Flatpak garbage should be blocking access or something. Just slap more layers on it, I'm sure that'll fix it and not annoy the hell out of anyone.