mirror of
https://github.com/flatpak/flatpak.git
synced 2026-03-14 05:02:44 -04:00
bc5ea57226
It turned out that some sources where bind-mounted read-write which should have been read-only: * Extensions * Fonts * resolv.conf * localtime * machine-id Many of these are not generally writable by the user, but some are, which is pretty bad. For instance if the an app is user-installed it will be able to write to its locale data. We fix this by using --ro-bind where needed.
Flatpak is a system for building, distributing and running sandboxed desktop applications on Linux.
See http://flatpak.org/ for more information.
Read documentation for the flatpak commandline tools and for the libflatpak library API.