flatpak: add --filesystem=host to sandbox permissions

GtkFileChooserNative is required in order to use the document portal.
Using this file chooser will require significant rework of source
selection, so enable host filesystem access until I can do this.

The CLI will need host filesystem access anyway since it can't use the
document portal.

(cherry picked from commit 30c510026e046b11f8f7ea7c74d28a4b6a054a22)

diff --git a/pkg/linux/flatpak/fr.handbrake.HandBrakeCLI.json b/pkg/linux/flatpak/fr.handbrake.HandBrakeCLI.json
index 5acef796f9df902361e5eb2add6bc57fe9290f06..13752bda7241da86448548c77f1cdbc8710e12d5 100644 (file)
--- a/pkg/linux/flatpak/fr.handbrake.HandBrakeCLI.json
+++ b/pkg/linux/flatpak/fr.handbrake.HandBrakeCLI.json
@@ -5,8 +5,7 @@
     "sdk": "org.gnome.Sdk",
     "command": "HandBrakeCLI",
     "finish-args": [
-        "--filesystem=xdg-videos",
-        "--filesystem=home"
+        "--filesystem=host"
     ],
     "modules": [
         {

diff --git a/pkg/linux/flatpak/fr.handbrake.ghb.json b/pkg/linux/flatpak/fr.handbrake.ghb.json
index f0f2e99d9751b4cbf94803e068c07ae9f9569b62..ff24c7f8db0efa2d1d6133c26945d24c71381829 100644 (file)
--- a/pkg/linux/flatpak/fr.handbrake.ghb.json
+++ b/pkg/linux/flatpak/fr.handbrake.ghb.json
@@ -7,10 +7,11 @@
     "finish-args": [
         "--share=ipc", "--socket=x11",
         "--socket=wayland",
-        "--filesystem=xdg-run/dconf", "--filesystem=~/.config/dconf:ro",
-        "--talk-name=ca.desrt.dconf", "--env=DCONF_USER_CONFIG_DIR=.config/dconf",
-        "--filesystem=xdg-videos",
-        "--filesystem=home"
+        "--filesystem=xdg-run/dconf",
+        "--filesystem=~/.config/dconf:ro",
+        "--talk-name=ca.desrt.dconf",
+        "--env=DCONF_USER_CONFIG_DIR=.config/dconf",
+        "--filesystem=host"
     ],
     "modules": [
         {