diff options
| author | Alexander Larsson <alexl@redhat.com> | 2022-01-10 13:29:44 +0100 |
|---|---|---|
| committer | Alexander Larsson <alexander.larsson@gmail.com> | 2022-01-12 19:48:34 +0100 |
| commit | 4d11f77aa7fd3e64cfa80af89d92567ab9e8e6fa (patch) | |
| tree | cdef4f71d53817bd31a13e66764a92200f3a5f6b /doc | |
| parent | 445bddeee657fdc8d2a0a1f0de12975400d4fc1a (diff) | |
| download | flatpak-4d11f77aa7fd3e64cfa80af89d92567ab9e8e6fa.tar.gz | |
manpages: Document the new details of --nofilesystem behaviour.
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/flatpak-build-finish.xml | 7 | ||||
| -rw-r--r-- | doc/flatpak-build.xml | 7 | ||||
| -rw-r--r-- | doc/flatpak-override.xml | 7 | ||||
| -rw-r--r-- | doc/flatpak-run.xml | 8 |
4 files changed, 29 insertions, 0 deletions
diff --git a/doc/flatpak-build-finish.xml b/doc/flatpak-build-finish.xml index 81a72452..95ba5d0c 100644 --- a/doc/flatpak-build-finish.xml +++ b/doc/flatpak-build-finish.xml @@ -258,6 +258,13 @@ xdg-music, xdg-pictures, xdg-public-share, xdg-templates, xdg-videos, an absolute path, or a homedir-relative path like ~/dir. This option can be used multiple times. + </para><para> + In general, "--nofilesystem=PATH" will remove access to a specific path if exactly that path + was previously granted. However, as a special case, "--nofilesystem=home" will remove access to all + previously granted locations inside the homedir as well, such as "home/some-dir", or "xdg-download", + and "--nofilesystem=host" will remove access to all previously granted locations. + Note: absolute paths that happen to be inside the current users home directory are not considered for + this special case. </para></listitem> </varlistentry> diff --git a/doc/flatpak-build.xml b/doc/flatpak-build.xml index a48e2acd..2cc0cc6d 100644 --- a/doc/flatpak-build.xml +++ b/doc/flatpak-build.xml @@ -247,6 +247,13 @@ xdg-music, xdg-pictures, xdg-public-share, xdg-templates, xdg-videos, an absolute path, or a homedir-relative path like ~/dir. This option can be used multiple times. + </para><para> + In general, "--nofilesystem=PATH" will remove access to a specific path if exactly that path + was previously granted. However, as a special case, "--nofilesystem=home" will remove access to all + previously granted locations inside the homedir as well, such as "home/some-dir", or "xdg-download", + and "--nofilesystem=host" will remove access to all previously granted locations. + Note: absolute paths that happen to be inside the current users home directory are not considered for + this special case. </para></listitem> </varlistentry> diff --git a/doc/flatpak-override.xml b/doc/flatpak-override.xml index e2768a42..0695b32f 100644 --- a/doc/flatpak-override.xml +++ b/doc/flatpak-override.xml @@ -230,6 +230,13 @@ xdg-music, xdg-pictures, xdg-public-share, xdg-templates, xdg-videos, an absolute path, or a homedir-relative path like ~/dir. This option can be used multiple times. + </para><para> + In general, "--nofilesystem=PATH" will remove access to a specific path if exactly that path + was previously granted. However, as a special case, "--nofilesystem=home" will remove access to all + previously granted locations inside the homedir as well, such as "home/some-dir", or "xdg-download", + and "--nofilesystem=host" will remove access to all previously granted locations. + Note: absolute paths that happen to be inside the current users home directory are not considered for + this special case. </para></listitem> </varlistentry> diff --git a/doc/flatpak-run.xml b/doc/flatpak-run.xml index 0cdd6ed4..803fae2e 100644 --- a/doc/flatpak-run.xml +++ b/doc/flatpak-run.xml @@ -381,7 +381,15 @@ xdg-music, xdg-pictures, xdg-public-share, xdg-templates, xdg-videos, an absolute path, or a homedir-relative path like ~/dir. This option can be used multiple times. + </para><para> + In general, "--nofilesystem=PATH" will remove access to a specific path if exactly that path + was previously granted. However, as a special case, "--nofilesystem=home" will remove access to all + previously granted locations inside the homedir as well, such as "home/some-dir", or "xdg-download", + and "--nofilesystem=host" will remove access to all previously granted locations. + Note: absolute paths that happen to be inside the current users home directory are not considered for + this special case. </para></listitem> + </varlistentry> <varlistentry> |