[gimp] build: adding network and dbus unlimited access.
- From: Jehan Pagès <jehanp src gnome org>
- To: commits-list gnome org
- Cc:
- Subject: [gimp] build: adding network and dbus unlimited access.
- Date: Sun, 29 Jan 2017 22:52:21 +0000 (UTC)
commit 7ffba0314f7d9fece6468ad8629fd6a691204399
Author: Jehan <jehan girinstud io>
Date: Sun Jan 29 23:43:07 2017 +0100
build: adding network and dbus unlimited access.
This is necessary for opening files from the network.
It is actually possible to allow only some named service bus which
would be much more in line with proper sandboxing. But I can't find
exactly what is the service name used for gvfs (which is the virtual
filesystem apparently used internally for remote file access in GIO).
Also I'm pretty sure we must use other buses for various services. We
should make a list of what service bus are necessary for normal usage.
For the time being though, let's just have a flatpak build with as many
features as possible.
build/flatpak/org.gimp.GIMP.json | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
---
diff --git a/build/flatpak/org.gimp.GIMP.json b/build/flatpak/org.gimp.GIMP.json
index 2462ddf..6d290c3 100644
--- a/build/flatpak/org.gimp.GIMP.json
+++ b/build/flatpak/org.gimp.GIMP.json
@@ -8,7 +8,7 @@
"rename-desktop-file": "gimp.desktop",
"rename-appdata-file": "gimp.appdata.xml",
"rename-icon": "gimp",
- "finish-args": ["--share=ipc", "--socket=x11", "--filesystem=host", "--filesystem=xdg-config/GIMP" ],
+ "finish-args": ["--share=ipc", "--socket=x11", "--filesystem=host", "--filesystem=xdg-config/GIMP",
"--share=network", "--socket=system-bus", "--socket=session-bus" ],
"tags": ["dev"],
"desktop-file-name-prefix": "(Dev) ",
"build-options" : {
[
Date Prev][
Date Next] [
Thread Prev][
Thread Next]
[
Thread Index]
[
Date Index]
[
Author Index]