On Thu, Oct 4, 2018 at 3:24 PM Florian Weimer wrote: > Flatpaks don't work this way. Try installing gedit and open a file > like ~/.ssh/id_rsa with it. There are no security prompts whatsoever, > yet the software in a flatpak can read your SSH private key.
AFAIK, the only way a Flatpak can read your SSH private key would be because you told the file portal that runs outside the Flatpak container to pass an fd of that file into the Flatpak container for the app to read. -- bye, pabs https://wiki.debian.org/PaulWise
