Re: [PATCH 13/13] img/app: run applications as non-root

Alyssa Ross
2025-12-01T11:31:28Z

[-- Attachment #1: Type: text/plain, Size: 828 bytes --]

Demi Marie Obenour <demiobenour@gmail.com> writes:

> On 11/26/25 16:34, Alyssa Ross wrote:
>> The session bus has to run as the same user as the application,
>> because xdg-desktop-portal expects to be able to open the
>> application's /proc/pid/root to check if it's a Flatpak.
>
> I recommend having the session bus socket in the standard location
> in case applications have hard-coded it. Non-standard locations are
> probably not tested at all.

We'll tie ourselves in knots if we try to accomodate every compatibility
problem that could possibly exist without knowing that it actually does.
In this case I wouldn't expect it to be very commonly hardcoded because
reading DBUS_SESSION_BUS_ADDRESS is easier than either reading
XDG_RUNTIME_DIR and appending to it, or checking uid and constructing
the path based on that.

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 227 bytes --]