flathub / flathub/com.github.junrrein.PDFSlicer
Sandbox this harder (instead of filesystem=host permissions by default)?
Open
- Dominant language
- No language data
- Stars
- 1
- Forks
- 3
- PR merge metrics
- No merged PRs in 30d
Description
Looking at this app with flatseal, I see that it has `filesystem=host` permissions by default. Shouldn't it be restricted to access only `xdg-download` and `xdg-documents` by default, or at best `filesystem=home`?
Contributor guide
No contributing guide indexed for this repository
Research direction
Locate the app's Flatpak manifest and inspect its declared filesystem permissions. Compare the current host access with the proposed xdg-download, xdg-documents, or home restrictions, then use Flatseal to verify that the chosen permissions still support the app's file workflows.
Written by the indexing model from the issue text.
Assessment
- Domain
- desktop, security
- Issue type
- Feature
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100