mirror of
https://github.com/flatpak/flatpak.git
synced 2026-05-10 09:00:20 -04:00
17cb1135cb
If we convert fallback-x11 internally to a conditional x11 permission, we cannot express current fallback-x11 stacking behavior: lower: empty + upper: !fallback-x11 -> no x11 access lower: fallback-x11 + upper: !fallback-x11 -> x11 access The reason is that conditionals have no view of the lower level. This changes things in a way that fallback-x11 stays its own socket permission with two interactions with the x11 socket permission: * If a upper level resets x11 (--socket=x11, --nosocket=x11), the lower level fallback-x11 permission gets dropped * When computing the allowed sockets, --socket=fallback-x11 gets converted to --socket=if:x11:!has-wayland Fixes: #6556