Fix remote shares access with GVFS 1.48

[x80486]

Reference: flathub/flathub#2180

[hfiguiere]

How is it broken?

[hadess]

It won't be able to talk to gvfsd, so everything that relies on gvfs won't work as expected.

[Jehan]

So all stuff like remote mounts and stuff like this, is that it?

From the linked report, all it takes is for us to add "--filesystem=xdg-run/gvfsd" to the list of permission, right? Then we'll have support for gvfs pre- and post-1.48?

[hfiguiere]

My question, is in which case does it fail? I couldn't find one, but it's totally possible that the problem is me here.

The original issue says not every app needs to do that:

If your application doesn't need to talk to gvfs via D-Bus, then it doesn't need access to xdg-run/gvfsd.

[hadess]

So all stuff like remote mounts and stuff like this, is that it?

Yes, so pretty much required for an app like GIMP that doesn't use portals but wants to integrate into GNOME.

From the linked report, all it takes is for us to add "--filesystem=xdg-run/gvfsd" to the list of permission, right? Then we'll have support for gvfs pre- and post-1.48?

Yes.

The original issue says not every app needs to do that:

If your app doesn't talk to gvfs, then also remove all the org.gtk.vfs D-Bus holes that got punched.

In short, if you use a non-portal file chooser, then you want to punch all the holes necessary for gvfs so you can mount remote shares and disks.

[Jehan]

If your app doesn't talk to gvfs, then also remove all the org.gtk.vfs D-Bus holes that got punched.

Nono it does, since it was added as a response to someone asking for it: 8739c53 - issue #4372 in GIMP tracker

Anyway maybe we can't reproduce the issue if we don't use gvfs 1.48 yet. I assume it depends on the gvfs present on host-side, @hadess ? (here I have 1.46 on a Fedora 33)

[hadess]

Anyway maybe we can't reproduce the issue if we don't use gvfs 1.48 yet. I assume it depends on the gvfs present on host-side, @hadess ? (here I have 1.46 on a Fedora 33)

It does, gvfs isn't installed inside the sandbox.

[Jehan]

Thanks @hadess.

@hfiguiere If you want to do your first direct commit, be my guest. 😉

[hfiguiere]

I see, given that I still run Fedora 33...