deezer-linux icon indicating copy to clipboard operation
deezer-linux copied to clipboard

Tighten up snap permissions

Open XioNoX opened this issue 2 years ago • 2 comments

The attached screenshot is what shows up in gnome-software about the snap version of Deezer.

I was wondering if access to the download directory could be removed. Ideally the Pictures directory as well.

Note that the app works very well!

See also https://gitlab.gnome.org/GNOME/gnome-software/-/wikis/software-metadata#safety

Screenshot from 2023-11-09 10-42-32

Thanks

XioNoX avatar Nov 09 '23 09:11 XioNoX

Hello, here is what I can do:

  • remove the downloads read access (may be used in order to import mp3 into deezer, but that's really not very important as the user can still use the Musics folder)
  • remove the picture folder read access (that would prevent the user from upload a profile picture, which is not very ergonomic as the user should then import its picture under 'Musics', and select it... I don't know if that's really wanted)
  • I could too remove access to the Musics folders, but then there is really no way to easily upload mp3, so that's not very interesting (and deezer is a music app, so giving it access to the musics folder should be acceptable)
  • concerning the use of x11/xwayland (the "legacy" orange flag), there is no much I can do for the moment as electron does not seem to work well under wayland
  • and for the proprietary code, there is nothing I can do, as it really is the property of deezer :)

aunetx avatar Nov 09 '23 14:11 aunetx

So I will give a go with the first and maybe second points in next version :)

aunetx avatar Nov 09 '23 14:11 aunetx