deezer-linux
deezer-linux copied to clipboard
Tighten up snap permissions
The attached screenshot is what shows up in gnome-software about the snap version of Deezer.
I was wondering if access to the download directory could be removed. Ideally the Pictures directory as well.
Note that the app works very well!
See also https://gitlab.gnome.org/GNOME/gnome-software/-/wikis/software-metadata#safety
Thanks
Hello, here is what I can do:
- remove the downloads read access (may be used in order to import mp3 into deezer, but that's really not very important as the user can still use the Musics folder)
- remove the picture folder read access (that would prevent the user from upload a profile picture, which is not very ergonomic as the user should then import its picture under 'Musics', and select it... I don't know if that's really wanted)
- I could too remove access to the Musics folders, but then there is really no way to easily upload mp3, so that's not very interesting (and deezer is a music app, so giving it access to the musics folder should be acceptable)
- concerning the use of x11/xwayland (the "legacy" orange flag), there is no much I can do for the moment as electron does not seem to work well under wayland
- and for the proprietary code, there is nothing I can do, as it really is the property of deezer :)
So I will give a go with the first and maybe second points in next version :)