Sebastian Wick 9b99035189
system-dir: Prevent removing of deployed refs via the system-helper ...
We have two use cases for removing refs: uninstalling, and pruning of
undeployed refs. Pruning undeployed refs is something we want anyone to
be able to do, because they can also pull updates and then not deploy
them. Uninstalling arbitrary refs on the other hand is problematic, and
its possible to remove the AppStream ref, and a deployed ref.
So we split removing a ref into a function which removes any ref, and
use it internally to implement e.g. uninstalling, and a function to
remove refs which are safe to remove. Only the latter one will escalate
through the system helper, making it harder for unprivileged users to
get into a state which can be exploited.
See the previous commit for such a state.
Resolves: https://github.com/flatpak/flatpak/security/advisories/GHSA-q4gr-vc25-57m5
2026-08-11 01:22:50 +02:00
2019-10-03 10:42:04 +02:00
2026-03-11 22:31:49 +00:00
2019-12-19 10:33:21 +01:00
2022-08-22 19:48:10 -07:00
2024-07-09 17:12:55 -03:00
2021-02-12 15:58:09 +01:00
2026-04-07 16:17:51 -04:00
2026-04-12 21:47:03 +00:00
2026-08-03 17:22:46 -04:00
2019-09-19 16:53:11 +00:00
2026-04-07 15:13:44 +00:00
2026-04-16 10:37:45 +00:00
2026-08-03 17:22:46 -04:00
2026-08-11 01:22:50 +02:00
2024-07-09 17:12:55 -03:00
2026-08-10 23:30:10 +02:00
2026-08-11 01:22:50 +02:00
2025-08-25 15:56:20 +00:00
2025-08-25 15:56:20 +00:00
2022-09-07 09:21:58 +02:00
2026-08-03 17:22:46 -04:00
2019-02-25 18:12:30 +00:00
2026-01-21 17:58:19 +00:00
2025-09-24 17:19:21 +00:00
2025-09-24 17:19:21 +00:00
2025-08-26 11:51:07 +00:00
2023-05-17 11:35:44 +01:00
2025-10-24 16:27:33 +00:00
2025-10-24 16:27:33 +00:00
2025-12-08 19:09:56 +00:00
2025-12-08 19:09:56 +00:00
2019-10-02 14:57:11 +02:00
2026-08-11 01:22:50 +02:00
2026-04-20 14:00:20 +00:00
2020-11-05 10:43:10 +01:00
2023-02-04 12:30:15 -06:00
2021-02-12 15:58:09 +01:00
2023-10-27 17:09:52 +01:00
2026-08-03 17:22:46 -04:00
2021-02-12 15:58:09 +01:00
2023-05-17 11:35:44 +01:00
2025-12-08 19:09:56 +00:00
2026-08-03 17:22:46 -04:00
2026-08-03 17:22:46 -04:00
2026-08-03 17:22:46 -04:00
2023-11-14 18:39:22 +00:00
2024-03-27 14:22:45 +00:00
2024-10-16 14:11:56 -03:00
2026-08-03 17:22:46 -04:00
2026-08-11 01:22:50 +02:00
2025-12-08 19:09:56 +00:00
2026-08-03 17:22:46 -04:00
2019-10-03 10:42:04 +02:00
2022-12-15 16:45:35 +00:00
2018-04-26 07:41:17 +00:00
2019-12-01 14:04:59 -05:00
2020-03-27 17:23:13 +01:00
2022-12-15 16:45:35 +00:00
2024-07-09 17:12:55 -03:00
2025-04-30 14:00:20 +00:00
2026-08-10 23:30:10 +02:00
2026-08-10 23:30:10 +02:00
2024-07-09 17:12:55 -03:00
2021-02-12 15:58:09 +01:00
2020-03-23 17:58:04 +01:00
2022-08-22 19:48:10 -07:00
2021-02-12 15:58:09 +01:00
2020-03-25 08:52:28 +01:00
2020-11-05 10:43:10 +01:00
2025-01-09 17:00:07 +01:00
2021-02-12 15:58:09 +01:00
2026-01-05 21:16:15 +05:30
2021-02-12 15:58:09 +01:00
2025-12-08 19:09:56 +00:00
2026-03-19 23:40:29 +00:00
2023-05-15 19:54:51 +01:00
2026-01-21 17:58:19 +00:00
2025-10-13 18:31:33 +00:00
2026-08-10 23:30:10 +02:00
2026-04-07 16:17:51 -04:00
2023-05-15 19:54:51 +01:00
2026-01-21 17:58:19 +00:00
2023-08-24 12:17:53 +02:00
2025-10-13 18:31:33 +00:00
2025-10-13 18:31:33 +00:00
2025-10-13 18:31:33 +00:00
2023-05-15 19:54:51 +01:00
2023-09-04 13:25:32 +01:00
2026-08-11 01:22:50 +02:00
2021-10-08 12:53:20 +02:00
2021-05-19 09:49:30 +02:00
2026-01-21 17:58:19 +00:00
2025-10-24 16:27:33 +00:00
2022-09-06 13:20:05 +02:00
2022-09-07 09:21:19 +02:00
2024-10-16 14:11:56 -03:00
2024-10-16 14:11:56 -03:00
2025-10-13 19:02:44 +00:00
2025-10-13 19:02:44 +00:00
2025-05-08 16:08:21 +00:00
2026-08-10 17:28:41 -04:00
2026-08-10 23:30:10 +02:00
2026-08-10 23:30:10 +02:00
2019-12-02 07:45:51 -05:00
2024-05-03 13:21:29 +01:00
2024-05-03 13:21:29 +01:00
2025-11-20 17:30:07 +00:00
2025-11-20 17:30:07 +00:00
2025-11-20 17:30:07 +00:00
2020-06-05 09:35:30 +02:00
2018-05-24 11:59:52 +00:00
2018-10-08 08:36:23 +00:00
2025-12-08 19:09:56 +00:00
2022-04-11 10:32:34 +02:00
2026-01-21 17:58:19 +00:00
Sebastian Wick
9b99035189