-
Notifications
You must be signed in to change notification settings - Fork 71
Please revert attack surface increase #1528
Description
It was great the way it was before, with no access to important directories. Now the flatpak is giving unlimited access to:
--filesystem=/mnt
--filesystem=/media
--filesystem=/run/media
This is problematic because the users attack surface is greatly increased if they have a mounted drive with stuff not for steam.
This is not necessary because the flatpak version of steam is only useful for atomic distributions or people who want an increase in security.
Other than bazzite which has steam in the base image, atomic distribution users are generally advanced in the mind and don't need pre-granted permissions that a very small percentage of them will need anyway.
For the people who want an increase in security, which is likely 90%+ of flatpak steam users, this is a massive security regression.
I am aware permissions can be manually changed but this is annoying even for advanced users and I believe that the flatpaks permissions should target the most common audience, which is people who want security.