Specifying "exec" for the sandboxed home mount

[Alexander Larsson]

I don't think that is (or should be) possible. If the sysadmin made a
mount noexec, then a non-privileged app like flatpak/bubblewrap should
not be able to undo that. I mean, if "noexec" is essentially optional,
what use is it?

On Wed, Mar 21, 2018 at 9:10 PM, Nicholas Bishop
<nicholasbishop at gmail.com> wrote:
> Hi,
>
> I ran into an issue with the Steam application. It wants to install an
> executable into the home partition. I am testing on a system with home
> mounted as noexec, and it seems that gets propagated to the sandboxed home
> mount when running the flatpak.
>
> I think I can work around this by bind mounting ~/.var and remounting it
> with the exec flag, but I was wondering if there's a way to fix this in
> flatpak itself.
>
> -Nicholas
>
> _______________________________________________
> Flatpak mailing list
> Flatpak at lists.freedesktop.org
> https://lists.freedesktop.org/mailman/listinfo/flatpak
>



-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
 Alexander Larsson                                Red Hat, Inc
       alexl at redhat.com         alexander.larsson at gmail.com