Re: Packages providing Flatpak sandbox escapes via vulnerable MIME Type Handler
Michael Cronenworth <[email protected]>
| Newsgroups | gmane.linux.redhat.fedora.devel |
|---|---|
| Message-ID | <[email protected]> |
On 7/8/26 6:40 AM, Daniel P. Berrangé wrote: > Is the solution not a matter of making the binfmt-misc handler always > be installed by the core wine RPM, and droppping the .desktop file ? > > Upstream quite reasonably wants to use a .desktop file because that > offers greater platform portability. The secrity scenario with flatpaks > sandboxing is only a Linux problem (at least right now). Portability > of .desktop files is not relevant for Fedora though, so surely we can > diverge a little rely on the binfmt-misc file alone and not register > the mime handler ? I'll be making that change the next time I have time to update wine, which has lacked an update for too long. I tried reviewing the history of having binfmt registration a separate package but I didn't see a reason. It's been this way since 2011. -- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new