Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Tighten up snap permissions #48

Open
XioNoX opened this issue Nov 9, 2023 · 2 comments
Open

Tighten up snap permissions #48

XioNoX opened this issue Nov 9, 2023 · 2 comments

Comments

@XioNoX
Copy link

XioNoX commented Nov 9, 2023

The attached screenshot is what shows up in gnome-software about the snap version of Deezer.

I was wondering if access to the download directory could be removed. Ideally the Pictures directory as well.

Note that the app works very well!

See also https://gitlab.gnome.org/GNOME/gnome-software/-/wikis/software-metadata#safety

Screenshot from 2023-11-09 10-42-32

Thanks

@aunetx
Copy link
Owner

aunetx commented Nov 9, 2023

Hello, here is what I can do:

  • remove the downloads read access (may be used in order to import mp3 into deezer, but that's really not very important as the user can still use the Musics folder)
  • remove the picture folder read access (that would prevent the user from upload a profile picture, which is not very ergonomic as the user should then import its picture under 'Musics', and select it... I don't know if that's really wanted)
  • I could too remove access to the Musics folders, but then there is really no way to easily upload mp3, so that's not very interesting (and deezer is a music app, so giving it access to the musics folder should be acceptable)
  • concerning the use of x11/xwayland (the "legacy" orange flag), there is no much I can do for the moment as electron does not seem to work well under wayland
  • and for the proprietary code, there is nothing I can do, as it really is the property of deezer :)

@aunetx
Copy link
Owner

aunetx commented Nov 9, 2023

So I will give a go with the first and maybe second points in next version :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants