Simon McVittie

> As well as I understand bubblewrap needs root privileges Not exactly, it needs `CAP_SYS_ADMIN` and various other capabilities(7) in its current namespace. "root" is specifically uid 0, but in...

The reason I'm interested in this is that if we want it to be possible to use OpenXR in Steam Linux Runtime containers (https://github.com/ValveSoftware/steam-runtime/issues/575) with OpenXR layers or runtimes that...

> I thought Vulkan was doing that intentionally based on my Debian system, but it appears that Mesa is just decorating its manifests in a similar way, and VUlkan is...

> The ones that are the wrong ABI (like /usr/lib/i386-linux-gnu/libvulkan_lvp.so for a 32-bit process) fail to load and are ignored. Recent versions of Vulkan-Loader do have a minor optimization for...

> I'm pretty confident we're searching XDG_CONFIG_HOME for runtimes, but it's entirely possible we've messed it up on the layer part. The code that does this hurts my brain a...

I thought we had reached agreement about this on #33, specifically in https://github.com/flatpak/libportal/issues/33#issuecomment-905779376, with the policy being similar to libgnome-desktop: * the API is not long-term stable * if the...

I thought SNI and other existing "tray-icon" protocols were problematic in sandboxed world because they assume either X11, or globally-scoped process IDs, or both?

> The FreeBSD implementation of FUSE doesn't implement that splice stuff which makes the code fail at the early initialization step. That seems like information that should be in the...

> makes it harder for applications to "sneakily" make themself accessibility technology by applying bad design I think this is really important. Android's accessibility portal-equivalent literally does get used by...

I've transferred this from Flatpak to xdg-desktop-portal, because if there was any sort of prompt, it would be implemented in xdg-desktop-portal and not in Flatpak. When an app inside the...