3 ms·
If you're using a flatpak, that's not actually the case. It would have very restricted access to the point where you even would have to explicitly give it acces
by esseph 1y ago
If you're using a flatpak, that's not actually the case. It would have very restricted access to the point where you even would have to explicitly give it access to user /home.
- pipes 1y agoSo if I run their software in a container they can't access my entire filesystem. I don't think that is a security feature. It sounds like if I ever run obsidian I should be using flat seal too.
- esseph 1y agoEr, what? I'm not claiming it's a security feature of Obsidian, I'm saying it's a consequence of running a flatpak - and in this situation it could be advantageous for those interested.
- s_ting765 1y agoYou're wrong. The obsidian flatpak ships by default with access to /home. https://github.com/flathub/md.obsidian.Obsidian/blob/5e594a4dc925b3edd928dd2ce6d9899b477e551f/md.obsidian.Obsidian.yml#L20 https://github.com/flathub/md.obsidian.Obsidian/blob/5e594a4...
- TomaszZielinski 1y agoI „love” such sandboxing defaults. Apps like Docker Desktop also share the whole home by default [1], which is pretty interesting if a big selling point is to keep stuff separated. No idea why node_packages need to have access to my tax returns :). Of course you can change that, but I bet many users keeps the default paths intact. [1] https://docs.docker.com/desktop/settings-and-maintenance/settings/ https://docs.docker.com/desktop/settings-and-maintenance/set...
- eli 1y agoNeeded for volume mounting to work easily I assume.
- TomaszZielinski 1y agoYeah, I forgot there’s the intermediate VM level, and user folders are shared there so that folders could be mounted to the individual containers using host paths.
- esseph 1y agoInteresting, I thought I had to turn that on for Obsidian! The first time I started installing flatpaks I ran into a bit of permission / device isolation trouble and ever since then, I use flatseal after installing an app to make sure it actually has access to things. I guess I misremembered in the case of Obsidian.