firefox-devedition-flatpak icon indicating copy to clipboard operation
firefox-devedition-flatpak copied to clipboard

U2F support.

Open jcgruenhage opened this issue 7 years ago • 4 comments

Firefox has U2F support hidden behind a config flag. I've just tried it with Firefox 57 on Fedora 27, it worked, but it didn't work in the Flatpak Nightly version.

jcgruenhage avatar Nov 19 '17 10:11 jcgruenhage

@alexlarsson The implementation needs to use libudev.so.1, I guess it's hardly doable ATM, right?

xhorak avatar Nov 21 '17 08:11 xhorak

Its possible to build libudev in a flatapak. Whether it works depends on how the app uses it. If you grant --device=all permission then all the devices will appear in /dev, and libudev can see them + /sys and do some stuff.

However, the host side udev database which is build by udevd is not visible in the sandbox, and the upstream claims it is not abi stable so we can't expose it.

I'd say, try it.

alexlarsson avatar Nov 21 '17 09:11 alexlarsson

Obviously (for isolation/sandboxing reasons, i.e. security reasons) one does not want to expose all USB devices to a browser application.

So I decided to tackle this issue, where it can (I think) be solved: In flatpak.

Here is a new issue: https://github.com/flatpak/xdg-desktop-portal/issues/989

rugk avatar Mar 19 '19 11:03 rugk

A permanent temporary solution would be to run sudo flatpak override --device=all org.mozilla.FirefoxDevEdition (and revert withsudo flatpak override --reset org.mozilla.FirefoxDevEdition) (and optionally replace sudo with --user).

jtagcat avatar Mar 25 '20 01:03 jtagcat