News for hackers. Stuff that matters.

A comment on Flatpak – a security nightmare. Parent comment

Re:Flatpak – a security nightmare by blattimwind on Tuesday October 09, 2018 @06:20PM (#18180311)
File picker is privileged and mediates access through monitor. Ditto for drag-and-drop. Problem (largely) solved.
[ Parent | on HN ]
Re:Flatpak – a security nightmare by TeMPOraL on Tuesday October 09, 2018 @06:23PM (#18180330)
Do you open your files in PyCharm or VSCode through a file picker?
[ Parent | on HN ]
Re:Flatpak – a security nightmare by ReverseCold on Tuesday October 09, 2018 @06:41PM (#18180436)
You open the parent project directory, right? That's how the file access controls work in MacOS. Sandboxed apps can't read files outside their sandbox until the user opens the directory/file in the file picker at least once. (Or something similar, I can't seem to find a source on that...)
[ Parent | on HN ]
Re:Flatpak – a security nightmare by TeMPOraL on Wednesday October 10, 2018 @12:58AM (#18182077)
Ah, ok. Makes more sense this way.
[ Parent | on HN ]
Re:Flatpak – a security nightmare by stephenr on Tuesday October 09, 2018 @06:38PM (#18180419)
I’d imagine once you open a directory you can open files within it (and child dirs)
[ Parent | on HN ]
Re:Flatpak – a security nightmare by blattimwind on Tuesday October 09, 2018 @06:37PM (#18180418)
Drag and drop project folder. Also, yes, I do open project directories using PyCharm's (poor) file picker.
[ Parent | on HN ]
Re:Flatpak – a security nightmare by aaaaaaaaaab on Tuesday October 09, 2018 @06:23PM (#18180328)
That’s how macOS sandboxing works too.
[ Parent | on HN ]