rusty-snake
rusty-snake
Untested patch if someone wants to benchmark. ```diff seccomp = seccomp_init (SCMP_ACT_ALLOW); if (!seccomp) return flatpak_fail_error (error, FLATPAK_ERROR_SETUP_FAILED, _("Initialize seccomp failed")); + r = seccomp_attr_set (seccomp, SCMP_FLTATR_CTL_OPTIMIZE, 2); + if...
Because libseccomp is a dynamic linked library on the most systems, you can LD_PRELOAD the btree optimization. https://gist.github.com/rusty-snake/0f10950f05e7ea71b3788d6a515ee894
A second performance factor of seccomp are CPU misfeature mitigations. `spec_store_bypass_disable` and `spectre_v2_user` can be configured to be enabled for all seccomp threads by default. Maybe take a look at...
There is no child sandbox spawning permission. Every flatpak can spawn child sandboxes. `org.freedesktop.portal.Flatpak` permission is about running commands unsandboxed (=on the host) via `flatpak-spawn --host`.
> According to our best knowledge we don't "officially" support F-droid. https://pub.dev/documentation/geolocator/latest/geolocator/AndroidSettings/forceLocationManager.html > To exclude Google mobile services from your app (for example because you want to publish your app...
`master/firejailed-tor-browser.profile` does not use any features available only in firejail>0.9.68 so no need to backport ATM. --- 0.9.52 – Ubuntu 18.04 LTS (Bionic Beaver): Will be removed when 22.04.1 is...
IzzyOnDroid pull the apk from GitHub Releases. The 1.0.0-beta.7 Releases has no apk attached.
While a custom commit message might be great to tell addition details, it might be worth to add some simpler solution first because the "Edit user-defined element selection" is very...
Did you changed any permissions for Flatseal or global? Namely `x11` and `wayland` or environment variables. Which distro do you run? Do other flatpaks work?