There's something from the polkit rules that worries me. I don't think
we want the rules to be this open. Could someone more conversant with
polkit rules give them a read and report back if this is something we
really want?
Something that specifically worried me:
- Normal users need admin authentication to install software
system-wide.
- Note that we install polkit rules that allow local users
in the wheel group to install without authenticating.
Thanks
** Bug watch added: gitlab.gnome.org/GNOME/libglnx/-/issues #2
https://gitlab.gnome.org/GNOME/libglnx/-/issues/2
** Bug watch added: github.com/flatpak/flatpak/issues #4223
https://github.com/flatpak/flatpak/issues/4223
** Bug watch added: github.com/flatpak/flatpak/issues #4224
https://github.com/flatpak/flatpak/issues/4224
** Bug watch added: github.com/flatpak/flatpak/issues #4233
https://github.com/flatpak/flatpak/issues/4233
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1812456
Title:
[MIR] libflatpak0
Status in flatpak package in Ubuntu:
New
Bug description:
Many applications have Flatpak integration using libflatpak. The
Ubuntu desktop team would like libflatpak0 in main so we can easily
build such applications. It takes a lot of work to make these
dependencies optional and sometimes that is not possible. We don't
need the Flatpak functionality to work by default and do not expect
any other Flatpak packages to be installed by default.
Default packages that have flatpak integration:
- gnome-control-center (application panel).
- malcontent (parental controls)
Availability
============
In Universe, builds for all architectures and in sync with Debian.
Rationale
=========
Multiple default packages have libflatpak as a dependency, including
malcontent (LP: #1892456).
Security
========
This will need a Security review.
https://security-tracker.debian.org/tracker/source-package/flatpak
There have been two CVEs, both have been fixed in all supported Ubuntu
releases.
More recently, there is LP: #1815528
Quality Assurance
=================
Bug subscriber: should be Ubuntu Desktop Bugs
https://bugs.launchpad.net/ubuntu/+source/flatpak
https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=flatpak
https://github.com/flatpak/flatpak/issues
tests are run as build tests (with dh_auto_test) and installed autopkgtests
on Debian and Ubuntu.
https://ci.debian.net/packages/f/flatpak
http://autopkgtest.ubuntu.com/packages/f/flatpak
UI Standards
============
N/A
Dependencies
============
All in main except for libostree-1-1 (LP: #1892454)
Standards Compliance
====================
Package uses standards version 4.5.0.
Maintenance
===========
- Actively developed upstream
https://github.com/flatpak/flatpak
- Maintained in Debian by the pkg-utopia team but more specifically,
it is maintained by Simon McVittie (smcv) who maintains Flatpak,
ostree, xdg-dbus-proxy, xdg-desktop-portal and xdg-desktop-portal-gtk.
short dh7 style rules, dh compat 10
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/flatpak/+bug/1812456/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
