Skip to content

Please revert attack surface increase #1528

@CreamyArch

Description

@CreamyArch

It was great the way it was before, with no access to important directories. Now the flatpak is giving unlimited access to:
--filesystem=/mnt
--filesystem=/media
--filesystem=/run/media

This is problematic because the users attack surface is greatly increased if they have a mounted drive with stuff not for steam.

This is not necessary because the flatpak version of steam is only useful for atomic distributions or people who want an increase in security.

Other than bazzite which has steam in the base image, atomic distribution users are generally advanced in the mind and don't need pre-granted permissions that a very small percentage of them will need anyway.

For the people who want an increase in security, which is likely 90%+ of flatpak steam users, this is a massive security regression.

I am aware permissions can be manually changed but this is annoying even for advanced users and I believe that the flatpaks permissions should target the most common audience, which is people who want security.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions