-
Notifications
You must be signed in to change notification settings - Fork 588
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
profiles: refactor file managers into file-manager-common #3365
Conversation
The question is, what is the purpose of the file-manager profiles. |
@rusty-snake Yep, that's the first thing we should tackle. As we do see issues on them it seems like people are in fact using them... I for one do not and IMO keeeping them creates more issues, false sense of security than they offer protection. Decisions, decisions :-) |
In case of Dolphin, you end up with the thumbnailing process sandboxed, which is the main (only?) benefit in my opinion. edit: to clarify, KDE file choosers launch their own thumbnailer process in Firejail, so this reasoning is not limited to Dolphin. |
Keep dolphin support in firecfg to sandbox thumbnailing: #3365 (comment).
@smitsohu Thanks for clarifying the dolphin situation. I re-added it to firecfg. |
Had some git trouble and lost my original branch. Closing here and creating a new PR: |
Thought it might be a good idea to bring some sanity in the file manager profiles. Some allow Python, some Perl, some need Lua and then there's the more important issue of what we want those applications to see or not, do we allow/deny D-Bus, sound, etc.
This will need some decisions I suppose. For now I've just tried to incorporate options we already had in some but not in others and assumed we want file managers to at least see everything under ${HOME}.