flathub / flathub/com.usebottles.bottles
Can you use less broad permissions than --device=all
Open
Beginner friendly
- Dominant language
- No language data
- Stars
- 27
- Forks
- 23
- Avg merge
- 7h 38m
- Merged PRs (30d)
- 10
Description
--device=all is a known potential sandbox escape vector.
--device=input for gaming controllers
--device=dri for gpu accel
Contributor guide
No contributing guide indexed for this repository
Research direction
Locate the Flatpak manifest or packaging configuration where --device=all is granted, then review the surrounding permissions. Replace the broad device access with the narrower --device=input and --device=dri permissions, and verify that gaming-controller input and GPU acceleration remain available without retaining unnecessary access.
Written by the indexing model from the issue text.
Assessment
- Domain
- security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 65/100