Skip to content

run: Forward documents using the sandbox mount path - #6848

Merged
swick merged 1 commit into
flatpak:mainfrom
razzeee:fix/blackbox-file-forwarding
Sep 24, 2026
Merged

swick merged 1 commit into
flatpak:mainfrom
razzeee:fix/blackbox-file-forwarding

Conversation

@razzeee

@razzeee razzeee commented Sep 22, 2026

Copy link
Copy Markdown
Contributor

The document portal is mounted at /run/flatpak/doc inside the sandbox, but forwarded arguments used its host mount path. With a nonstandard host runtime directory, that path is inaccessible to the application.

Keep the host path local to mount setup and return the sandbox destination to argument forwarding. Preserve NULL when the portal is unavailable.

Add real-portal regression tests for user and isolated system installs. Check file read/write, escaped URIs, directories and passthrough controls. Skip the directory subtest on portal interfaces older than version 4.

Comment thread tests/libtest.sh Fixed
Comment thread tests/libtest.sh Fixed
Comment thread tests/libtest.sh Fixed
@razzeee
razzeee force-pushed the fix/blackbox-file-forwarding branch from f726d89 to 003dcd6 Compare September 22, 2026 00:55
Comment thread common/flatpak-run.c Outdated
Comment thread common/flatpak-run.c Outdated
@razzeee
razzeee force-pushed the fix/blackbox-file-forwarding branch 5 times, most recently from d3a44c8 to 5d68306 Compare September 22, 2026 21:22

@swick swick left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looking good, just nitpicking at this point

Comment thread tests/meson.build Outdated
Comment thread tests/test-file-forwarding.sh Outdated
Comment thread tests/test-file-forwarding.sh
The document portal is mounted at /run/flatpak/doc inside the sandbox,
but forwarded arguments used its host mount path. With a nonstandard
host runtime directory, that path is inaccessible to the application.

Keep the host path local to mount setup and return the sandbox destination
to argument forwarding. Preserve NULL when the portal is unavailable.

Add real-portal regression tests for user and isolated system installs.
Check file read/write, escaped URIs, directories and passthrough controls.
Skip the directory subtest on portal interfaces older than version 4.
@razzeee
razzeee force-pushed the fix/blackbox-file-forwarding branch from 767cf64 to 8eff694 Compare September 24, 2026 11:39
@swick
swick added this pull request to the merge queue Sep 24, 2026
Merged via the queue into flatpak:main with commit 5f19424 Sep 24, 2026
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants