mirror of
https://github.com/flatpak/flatpak.git
synced 2026-01-23 23:28:14 -05:00
e72beada8a
Instead of mounting our own sysfs instance we bind mount in only a subset of the /sys subdirectories from the host. This has several advantages: * If something was covered out in the host we will shadow that (i.e. the app will never see more of sysfs than non xdg-apps) * We can avoid showing some weird parts of sysfs, focusing on the device descriptions needed for e.g. mesa * Bind mounts are allowed in a non-root user-namespace, whereas the sysfs mount is not, taking us one step closer to that.
xdg-app
xdg-app is a system for building, distributing and running sandboxed desktop applications on Linux.
See https://wiki.gnome.org/Projects/SandboxedApps for more information.