flathub / net.davidotek.pupgui2 Goto Github PK

Hi there, I was just reviewing flatpak permissions of ProtonUp-Qt.
Most of the specified filesystem permissions make sense to me except a couple (which is why I started looking a bit more closely) and I just wanted to share my feedback.

        "--filesystem=~/.config",

.config seems relatively "open" as many other applications create folders there as well.
I haven't gone through all of the code but at a glance it looks like it could be scoped to ~/.config/steamtinkerlaunch ?

        "--filesystem=~/.bashrc",
        "--filesystem=~/.zshrc",
        "--filesystem=~/.kshrc",

This is more personal preference maybe but I don't really like applications editing these particular files to add their own entries.
It looks like the *rc references are used for adding/removing steamtinkerlaunch to the PATH.
I will probably never use ProtonUp-Qt for anything other than installing or updating proton so for my particular case I can remove the permissions without breaking anything.
I understand why it might be necessary for compatibility with OStree systems though.

When updating the Flatpaks installed on my system I get the following message:

Info: runtime org.kde.Platform branch 6.5 is end-of-life, with reason:                                                                                                                                                                                         
   We strongly recommend moving to the latest stable version of the Platform and SDK                                                                                                                                                                           
Info: applications using this runtime:                                                                                                                                                                                                                         
   net.davidotek.pupgui2                                                                                                                                                                                                                                       

The application needs to be rebuild against the latest version of the KDE Platform Runtime, which is 6.6 6.7.

Any particular reasons for this flatpak have access to all devices?

pre commit e37d418

latest update

My system is Kubuntu 20.04 LTS.

Hi @DavidoTek,

We're preparing for the launch of beta.flathub.org, and would like to see ProtonUp-Qt verified as maintained by its developers. Currently, I've marked it as such manually, but it would be preferred to use one of the verification features. This can be initiated by logging it at https://beta.flathub.org/login with a GitHub account, pressing "Developer Settings" and following the instructions there.

Please let me know when it's done, so I can remove the manual verification flag.