[Webkit-unassigned] [Bug 222116] New: [Flatpak SDK] WebProcess sandboxing fails in current runtime

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=222116

            Bug ID: 222116
           Summary: [Flatpak SDK] WebProcess sandboxing fails in current
                    runtime
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Tools / Tests
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: pnormand at igalia.com
                CC: mcatanzaro at gnome.org

When WebProcess sandboxing is enabled in Cog/MB the process launcher checks flatpak-spawn sandboxing capabilities by running:

flatpak-spawn --sandbox --sandbox-expose-path-ro-try=/this_path_doesnt_exist echo

which fails:

Portal call failed: Authorization error: Key file does not have group “Application”

because our /.flatpak-info file represents our SDK runtime, not a real app runtime.

Michael suggested we should make Cog/MB dedicated Flatpak apps.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210218/7fc418da/attachment.htm>