flatpak

Edit Package flatpak
No description set
Refresh
Refresh
Source Files
Filename Size Changed
_service 0000000521 521 Bytes
_servicedata 0000000236 236 Bytes
flatpak-1.0.6.tar.xz 0000719476 703 KB
flatpak.changes 0000120931 118 KB
flatpak.spec 0000007608 7.43 KB
polkit_rules_usability.patch 0000001021 1021 Bytes
Revision 25 (latest revision is 84)
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 659047 from Dominique Leuenberger's avatar Dominique Leuenberger (dimstar) (revision 25)
- Update to version 1.0.6:
  * This release fixes an issue that lets system-wide installed
    applications create setuid root files inside their app dir
    (somewhere in /var/lib/flatpak/app). Setuid support is disabled
    inside flatpaks, so such files are only a risk if the user runs
    them manually outside flatpak. Installing a flatpak system-wide
    needs root access, so this isn't a privilege elevation for
    non-root users.
  * The permissions of the files created by the apply_extra script is
    canonicalized and the script itself is run without any capabilities.
  * Better matching of existing remotes when the local and remote configuration
    differs wrt collection ids.
  * New flatpakrepo DeployCollectionID replaces CollectionID, doing the
    same thing. It is recommended to use this instead because older versions
    of flatpak has bugs in the support of collection ids, and this key
    will only be respected in versions where it works.
  * The X11 socket is now mounted read-only.

- Mark flatpak.sh as %config and move the systemhelper dbus config
  file under /usr
- Remove the flatpak-rpmlintrc file that is no longer needed.

- Make polkit_rules_usability.patch effective by adding a 60- prefix
  to the rules file. This will cause it to be executed before the (forwarded request 657831 from alarrosa)
Comments 2


Walddys Emmanuel Dorrejo Céspedes's avatar

flatpak-remote-flathub v1.14.3-1.1 is bringing only the "system remote", it is recommended that by a default installation only "user remote" is to be included, and not both.

openSUSE Build Service is sponsored by