Simon McVittie

> maybe flatpak could [have] rules to ask udev to create a /dev/flatpak (only accessible to its flatpak group) with some folders for device type, such as /dev/flatpak/joystick, use the...

> applications will need adjustments to essentially treat that path as "root" Note in particular that if you do this, dereferencing symlinks below that pseudo-root directory will not work as...

If this feature is still considered useful even with that limitation, it would probably be a good idea to send a PR to systemd to reserve `/run/host/root` for this purpose...

This is known, and #426 attempted to fix it, but as I pointed out while reviewing #426, the change proposed there isn't actually valid. The static analyzer that you are...

This is related to #11887 and would help to avoid similar /tmp symlink attacks in other parts of SDL (although for #11887, the vulnerable code already has GLib and GTK...

The equivalent of https://github.com/flatpak/flatpak/commit/2cb17b4eb82ecedaa98b5b7f954cf3e52fa95682 is probably the best solution to this.

It seems that the python3-selenium in recent Debian and Ubuntu needs an external component (selenium-manager), which is not at all straightforward to package in a way that meets Debian's standards...

If this is out-of-scope for SDL_ttf, then a SDL + Pango wrapper might be an alternative. Unfortunately, "the" SDL + Pango wrapper is stuck in SDL 1.2, with at least...

> SDL_ttf only knows about the font that you've provided, and only allows one font in a single text output pass. > This definitely seems like something we should remedy...

> Is it possible to add the ability to mount additional host folders at specified sandbox paths? It is technically possible, but the design of Flatpak intentionally doesn't do this,...