https://bugs.kde.org/show_bug.cgi?id=431223

--- Comment #18 from Christoph Cullmann <cullm...@kde.org> ---
Hi, thanks that you honor our request.
I think it would be good to have Kate purged from flathub, I will remove the
download link.

For the other comments:

1) I don't consider e.g. the integrated (default on) konsole plugin or project
plugin fringe stuff. And a terminal that is sandboxed without the user shell
and user env is already not that useful, I at least won't be able to use this
properly. Worse for the LSP stuff that we heavily promote. Having some checks
that tell what is missing won't help, as the user won't be able to provide it,
given we live in a sandbox. (if the user doesn't install a complete dev env in
the home manually) And users will be heavily confused why we say "no clangd" if
the have a global clangd and can use it perfectly well via vim/emacs/atom/...

2) For security: Kate already was allowed to access all files of the host =>
there is no security. With trivial code Kate could just patch the shell configs
in your home and you will happily execute any exploit on the next start of any
shell for the user. I don't think people should think they are secure just
because they launched it via flatpak. That is only true of if the permissions
are really heavily restricted. But I agree, if you have a app with a really
strict limit on the stuff it can do, it is nice, e.g. perfect for some game or
other application that doesn't need to work on your data, there really see the
benefit. Or your Browser that can then only access ~/Downloads or such.

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to