Reduce file access, add StatusNotifierWatcher for KDE

Closes flathub#19 , improves security. Possibility of closing flathub#13, needs testing
fourstepper · Jan 3, 2021 · d9e0bb1 · d9e0bb1
1 parent ad07a2a
commit d9e0bb1
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/com.mattermost.Desktop.json b/com.mattermost.Desktop.json
@@ -13,9 +13,14 @@
         "--socket=pulseaudio",
         "--share=network",
         "--device=dri",
-        "--filesystem=home",
+        "--filesystem=xdg-documents:ro",
+        "--filesystem=xdg-pictures:ro",
+        "--filesystem=xdg-music:ro",
+        "--filesystem=xdg-videos:ro",
+        "--filesystem=xdg-download",
         "--talk-name=org.freedesktop.Notifications",
         "--talk-name=com.canonical.AppMenu.Registrar"
+        "--talk-name=org.kde.StatusNotifierWatcher",
     ],
     "modules": [
         {