Simon McVittie

I said this back in 2022 and it's still true: > The cost is that the syscall filter will be more complicated (potentially harming performance in syscall-heavy workloads like games),...

This has been on hold for long enough that I no longer remember its status clearly, and the testing I previously did is no longer necessarily valid. I think we...

> `flatpak run app.author.name` What is a real example of an app for which this fails? (If you want a simple app to test with, perhaps try https://flathub.org/apps/org.gnome.Recipes) What runtime...

What version of bubblewrap is this? (`bwrap --version`)

This seems very strange. The error is happening during setup of the sandbox (container), which runs in a temporary root filesystem (a tmpfs) with your "real" system mounted on `oldroot`,...

This seems to have conflicts with the updates that were needed when releasing 1.15.8, please could you rebase it? (I'm probably going to release 1.15.9 sometime soon, so perhaps wait...

Did you label the expected behaviour and the current (actual) behaviour in your issue report the wrong way round? The text of the report doesn't seem to match the headings.

If my guess is correct and you've labelled expected behaviour and current behaviour the wrong way round, then this is probably the same issue that https://github.com/flatpak/xdg-desktop-portal/pull/1378 aims to solve.

> talk to raw HID devices This isn't normally allowed for unprivileged users, but Steam expects/requires that [its udev rules](https://github.com/ValveSoftware/steam-devices/) have been installed on the host system, to allow raw...

Prior art in Windows UWP: Windows prevents access to keyboards, mice etc., but allows access to all other HID devices for apps whose manifest mentions ``. In versions older than...