A way to bypass Background portal

VI-MCMXCV VI-MCMXCV at proton.me
Tue Nov 12 10:38:25 UTC 2024


Greetings.

I apologise, in advance, if this isn't really a security issue or it has already been reported, but I feel I should report it, anyway.

It's possible to autostart and daemonize a flatpak app (Easy Effects, in my case), without giving it access to org.freedesktop.Background portal, by simply adding flatpak run com.github.wwmm.easyeffects --gapplication-service to a wm/compositor/de autostart config. After being added, it's possible to access and exit the app interface without killing the daemon process. However, if I open Easy effects settings - a pop-up notification about lacking 'org.freedesktop.Background' access pop-ups and the background process will be killed any time, I open and close Easy Effects interface.

Sent with [Proton Mail](https://proton.me/mail/home) secure email.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/flatpak/attachments/20241112/e0c7305f/attachment.htm>


More information about the Flatpak mailing list