mirror/flatpak
1
0 Fork 0
mirror of https://github.com/flatpak/flatpak.git synced 2026-09-23 13:46:07 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
ad044fc728cffe22dfa78e14c351bfe907f5164f
flatpak/common
T
History
Sebastian Wick ad044fc728 run: Use RESOLVE_BENEATH for host-side extension file access 
Extension content is controlled by the extension developer. When setting
up the sandbox, Flatpak accesses the .ref file and iterates merge_dirs
within the extension's files directory on the host using path-based
operations that follow symlinks. A malicious extension can place symlinks
that escape the extension directory, causing Flatpak's host process to
access arbitrary host paths. This discloses host directory listings to
the sandboxed application via the resulting merge symlinks.

Use glnx_chaseat with GLNX_CHASE_RESOLVE_BENEATH to confine path
resolution to the extension's files directory.

Resolves: https://github.com/flatpak/flatpak/security/advisories/GHSA-w69g-9x8j-7p8f
2026-08-11 01:22:50 +02:00
..
flatpak-appdata-private.h
flatpak-appdata: Add support for extracting app content ratings
2019-10-03 10:42:04 +02:00
flatpak-appdata.c
appdata: Fix a -Wanalyzer-null-argument warning
2026-03-11 22:31:49 +00:00
flatpak-auth-private.h
authenticator: Fix sandboxed authenticators
2019-12-19 10:33:21 +01:00
flatpak-auth.c
Add a vim modeline and .editorconfig
2022-08-22 19:48:10 -07:00
flatpak-bundle-ref.c
utils: Move remaining direct ostree dependencies to repo-utils
2024-07-09 17:12:55 -03:00
flatpak-bundle-ref.h
Add G_BEGIN_DECLS/G_END_DECLS to public headers
2021-02-12 15:58:09 +01:00
flatpak-bwrap-private.h
flatpak-bwrap: Add dup-ing variant flatpak_bwrap_add_args_data_fd_dup
2026-04-07 16:17:51 -04:00
flatpak-bwrap.c
bwrap: Clarify a comment
2026-04-12 21:47:03 +00:00
flatpak-chain-input-stream-private.h
common: Stop using G_GNUC_CONST in _get_type funcs
2026-08-03 17:22:46 -04:00
flatpak-chain-input-stream.c
Don't use deprecated g_type_class_add_private API
2019-09-19 16:53:11 +00:00
flatpak-common-types-private.h
Revert "run: Add --no-scope to flatpak run"
2026-04-07 15:13:44 +00:00
flatpak-context-private.h
context: Add USB Portal conditional
2026-04-16 10:37:45 +00:00
flatpak-context.c
context: Fixed negated permission string for allow and share options
2026-08-03 17:22:46 -04:00
flatpak-dir-private.h
common: Check signatures when installing OCI images
2025-12-08 19:09:56 +00:00
flatpak-dir-utils-private.h
common: Break out the parts of flatpak-utils that deal with FlatpakDir
2024-07-09 17:12:55 -03:00
flatpak-dir-utils.c
dir-utils: Reject path traversal in extension metadata
2026-08-10 23:30:10 +02:00
flatpak-dir.c
app, common: Remove duplicate directories from export functions
2026-08-03 17:22:46 -04:00
flatpak-docker-reference-private.h
image-source: Add flatpak_image_source_new_for_location
2025-08-25 15:56:20 +00:00
flatpak-docker-reference.c
image-source: Add flatpak_image_source_new_for_location
2025-08-25 15:56:20 +00:00
flatpak-enum-types.c.template
enum-types: Make generated files more reproducible
2022-09-07 09:21:58 +02:00
flatpak-enum-types.h.template
common: Stop using G_GNUC_CONST in _get_type funcs
2026-08-03 17:22:46 -04:00
flatpak-error.c
Run uncrustify
2019-02-25 18:12:30 +00:00
flatpak-error.h
fix: cross typos, detail below
2026-01-21 17:58:19 +00:00
flatpak-exports-private.h
exports: add host-root
2025-09-24 17:19:21 +00:00
flatpak-exports.c
exports: add host-root
2025-09-24 17:19:21 +00:00
flatpak-glib-backports-private.h
glib-backports: Add g_set_str from 2.84.1
2025-08-26 11:51:07 +00:00
flatpak-glib-backports.c
glib-backports: Use g_ascii_string_to_unsigned if GLib is new enough
2023-05-17 11:35:44 +01:00
flatpak-image-collection-private.h
image-collection: Add the new FlatpakImageCollection class
2025-10-24 16:27:33 +00:00
flatpak-image-collection.c
image-collection: Add the new FlatpakImageCollection class
2025-10-24 16:27:33 +00:00
flatpak-image-source-private.h
common: Check signatures when installing OCI images
2025-12-08 19:09:56 +00:00
flatpak-image-source.c
common: Check signatures when installing OCI images
2025-12-08 19:09:56 +00:00
flatpak-installation-private.h
Export (private) flatpak_installation_get_dir()
2019-10-02 14:57:11 +02:00
flatpak-installation.c
common: Report the age of the configuration
2026-04-20 14:00:20 +00:00
flatpak-installation.h
common: Report the age of the configuration
2026-04-20 14:00:20 +00:00
flatpak-installed-ref-private.h
installation: Use the FlatpakDecomposed APIs to create FlatpakRef:s
2020-11-05 10:43:10 +01:00
flatpak-installed-ref.c
Revert "Add support for files generated by appstreamcli compose (#5277)"
2023-02-04 12:30:15 -06:00
flatpak-installed-ref.h
Add G_BEGIN_DECLS/G_END_DECLS to public headers
2021-02-12 15:58:09 +01:00
flatpak-instance-private.h
instance: Add flatpak_instance_get_run_environ()
2023-10-27 17:09:52 +01:00
flatpak-instance.c
instance: Annotate flatpak_instance_get_all as (transfer container)
2026-08-03 17:22:46 -04:00
flatpak-instance.h
Add G_BEGIN_DECLS/G_END_DECLS to public headers
2021-02-12 15:58:09 +01:00
flatpak-json-backports-private.h
common: Move json-glib backports to their own file
2023-05-17 11:35:44 +01:00
flatpak-json-oci-private.h
json-oci: Make FlatpakOciSignature just a simple signature
2025-12-08 19:09:56 +00:00
flatpak-json-oci.c
Fix crash on image indexes with missing architecture
2026-08-03 17:22:46 -04:00
flatpak-json-private.h
Make mandatory properties from OCI specifications mandatory
2026-08-03 17:22:46 -04:00
flatpak-json.c
Handle null properties as missing properties
2026-08-03 17:22:46 -04:00
flatpak-locale-utils-private.h
common: Move locale utils to their own small translation unit
2023-11-14 18:39:22 +00:00
flatpak-locale-utils.c
locale-utils: Always get system locale languages from localed
2024-03-27 14:22:45 +00:00
flatpak-metadata-private.h
flatpak: Add USB enumerables / hidden lists
2024-10-16 14:11:56 -03:00
flatpak-oci-registry-private.h
oci-registry: Check signatures from mirrored repo in the system helper
2026-08-03 17:22:46 -04:00
flatpak-oci-registry.c
oci: Limit delta path length to PATH_MAX
2026-08-10 23:30:10 +02:00
flatpak-oci-signatures-private.h
common: Check signatures when installing OCI images
2025-12-08 19:09:56 +00:00
flatpak-oci-signatures.c
Handle null properties as missing properties
2026-08-03 17:22:46 -04:00
flatpak-parental-controls-private.h
dir: Support filtering app installs/upgrades by user’s OARS settings
2019-10-03 10:42:04 +02:00
flatpak-parental-controls.c
common: Use g_info() for messages that will be shown by flatpak -v
2022-12-15 16:45:35 +00:00
flatpak-portal-error.c
common: Move flatpak-portal-error.[ch] back to common code
2018-04-26 07:41:17 +00:00
flatpak-portal-error.h
doc: Document FlatpakPortalError
2019-12-01 14:04:59 -05:00
flatpak-progress-private.h
FlatpakProgress: Clean up APIs for handling extra data
2020-03-27 17:23:13 +01:00
flatpak-progress.c
common: Use g_info() for messages that will be shown by flatpak -v
2022-12-15 16:45:35 +00:00
flatpak-prune-private.h
common: Explicitly include ostree.h where needed
2024-07-09 17:12:55 -03:00
flatpak-prune.c
prune: Move locking operations to execute only outside dry run
2025-04-30 14:00:20 +00:00
flatpak-ref-utils-private.h
ref-utils: Make remote name validation public and take an error
2026-08-10 23:30:10 +02:00
flatpak-ref-utils.c
ref-utils: Make remote name validation public and take an error
2026-08-10 23:30:10 +02:00
flatpak-ref.c
utils: Remove unnecessary flatpak-ref-utils-private.h inclusion
2024-07-09 17:12:55 -03:00
flatpak-ref.h
Add G_BEGIN_DECLS/G_END_DECLS to public headers
2021-02-12 15:58:09 +01:00
flatpak-related-ref-private.h
Drop more collection_id use
2020-03-23 17:58:04 +01:00
flatpak-related-ref.c
Add a vim modeline and .editorconfig
2022-08-22 19:48:10 -07:00
flatpak-related-ref.h
Add G_BEGIN_DECLS/G_END_DECLS to public headers
2021-02-12 15:58:09 +01:00
flatpak-remote-private.h
lib: Only support FLATPAK_REMOTE_TYPE_STATIC remote types
2020-03-25 08:52:28 +01:00
flatpak-remote-ref-private.h
installation: Use the FlatpakDecomposed APIs to create FlatpakRef:s
2020-11-05 10:43:10 +01:00
flatpak-remote-ref.c
Fix "end of line" typo in internal #defines
2025-01-09 17:00:07 +01:00
flatpak-remote-ref.h
Add G_BEGIN_DECLS/G_END_DECLS to public headers
2021-02-12 15:58:09 +01:00
flatpak-remote.c
typo: Fix URL usages
2026-01-05 21:16:15 +05:30
flatpak-remote.h
Add G_BEGIN_DECLS/G_END_DECLS to public headers
2021-02-12 15:58:09 +01:00
flatpak-repo-utils-private.h
app: Add a "signature lookaside" repository configuration
2025-12-08 19:09:56 +00:00
flatpak-repo-utils.c
repo-utils: Remove dead code
2026-03-19 23:40:29 +00:00
flatpak-run-cups-private.h
common: Split up socket setup from flatpak-run into multiple files
2023-05-15 19:54:51 +01:00
flatpak-run-cups.c
fix: cross typos, detail below
2026-01-21 17:58:19 +00:00
flatpak-run-dbus-private.h
context: Support condtional permissions for socket and devices
2025-10-13 18:31:33 +00:00
flatpak-run-dbus.c
run-dbus: Correct --broadcast rules for the AT-SPI bus
2026-08-10 23:30:10 +02:00
flatpak-run-private.h
run: Add (ro-)bind fds to flatpak_run_app
2026-04-07 16:17:51 -04:00
flatpak-run-pulseaudio-private.h
common: Split up socket setup from flatpak-run into multiple files
2023-05-15 19:54:51 +01:00
flatpak-run-pulseaudio.c
fix: cross typos, detail below
2026-01-21 17:58:19 +00:00
flatpak-run-sockets-private.h
common: add support for Wayland security context
2023-08-24 12:17:53 +02:00
flatpak-run-sockets.c
context: Support condtional permissions for socket and devices
2025-10-13 18:31:33 +00:00
flatpak-run-wayland-private.h
context: Support condtional permissions for socket and devices
2025-10-13 18:31:33 +00:00
flatpak-run-wayland.c
context: Support condtional permissions for socket and devices
2025-10-13 18:31:33 +00:00
flatpak-run-x11-private.h
common: Split up socket setup from flatpak-run into multiple files
2023-05-15 19:54:51 +01:00
flatpak-run-x11.c
Use g_steal_fd()
2023-09-04 13:25:32 +01:00
flatpak-run.c
run: Use RESOLVE_BENEATH for host-side extension file access
2026-08-11 01:22:50 +02:00
flatpak-syscalls-private.h
common: Add a list of recently-added Linux syscalls
2021-10-08 12:53:20 +02:00
flatpak-transaction-private.h
Transaction: Ensure we download the subsummary for the arch of added refs
2021-05-19 09:49:30 +02:00
flatpak-transaction.c
fix: cross typos, detail below
2026-01-21 17:58:19 +00:00
flatpak-transaction.h
transaction: Support sideloading from OCI repos/archives
2025-10-24 16:27:33 +00:00
flatpak-uri-private.h
uri: Don't do scheme-based normalization with GLib 2.66.x
2022-09-06 13:20:05 +02:00
flatpak-uri.c
uri: Don't rely on g_time_zone_new_offset()
2022-09-07 09:21:19 +02:00
flatpak-usb-private.h
context: Implement device lists for usb
2024-10-16 14:11:56 -03:00
flatpak-usb.c
context: Implement device lists for usb
2024-10-16 14:11:56 -03:00
flatpak-utils-base-private.h
session-helper: track the destinations of broken symlinks
2025-10-13 19:02:44 +00:00
flatpak-utils-base.c
session-helper: track the destinations of broken symlinks
2025-10-13 19:02:44 +00:00
flatpak-utils-http-private.h
common: Implement /etc/containers/certs.d for OCI registries
2025-05-08 16:08:21 +00:00
flatpak-utils-http.c
Revert "http: Reset curl TLS options between transfers"
2026-08-10 17:28:41 -04:00
flatpak-utils-private.h
common: Use fd-based operations in flatpak_switch_symlink_and_remove
2026-08-10 23:30:10 +02:00
flatpak-utils.c
common: Use fd-based operations in flatpak_switch_symlink_and_remove
2026-08-10 23:30:10 +02:00
flatpak-version-macros.h.in
doc: Fix a duplicate section
2019-12-02 07:45:51 -05:00
flatpak-xml-utils-private.h
xml-utils: Don't expose symbols that don't need to be visble
2024-05-03 13:21:29 +01:00
flatpak-xml-utils.c
xml-utils: Don't expose symbols that don't need to be visble
2024-05-03 13:21:29 +01:00
flatpak-zstd-compressor-private.h
flatpak-build-bundle: Add --oci-layer-compress=zstd
2025-11-20 17:30:07 +00:00
flatpak-zstd-compressor.c
flatpak-build-bundle: Add --oci-layer-compress=zstd
2025-11-20 17:30:07 +00:00
flatpak-zstd-decompressor-private.h
zstd-decompressor: Replace boilerplate with G_DECLARE_FINAL_TYPE macro
2025-11-20 17:30:07 +00:00
flatpak-zstd-decompressor.c
oci: Make libzstd optional (and disable OCI deltas if not there)
2020-06-05 09:35:30 +02:00
flatpak.c
Merge lib/* into common
2018-05-24 11:59:52 +00:00
flatpak.h
Make FlatpakInstance api public
2018-10-08 08:36:23 +00:00
meson.build
oci-signatures: Move OCI signature code to a separate file
2025-12-08 19:09:56 +00:00
test-lib.c
build: Consistently include libglnx header as "libglnx.h"
2022-04-11 10:32:34 +02:00
valgrind-private.h
fix: cross typos, detail below
2026-01-21 17:58:19 +00:00