bypass spot-sandbox for Flatpak applications started not via flatpak run

vanilla-dpup · Jun 11, 2023 · 2e4bd56 · 2e4bd56
1 parent e20b645
commit 2e4bd56
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/woof-code/rootfs-skeleton/usr/sbin/run-as-spot b/woof-code/rootfs-skeleton/usr/sbin/run-as-spot
@@ -19,10 +19,18 @@ esac
 
 PROG="$1"
 
+case "$PROG" in
+*/*) EXEC="$PROG" ;;
+*)
+	EXEC=`command -v "$PROG"`
+	[ -z "$EXEC" ] && EXEC="$PROG"
+	;;
+esac
+
 # if spot-sandbox is present, run the shell inside a sandbox
 SANDBOX=
-case "$PROG" in
-*.AppImage|flatpak|*/flatpak) ;;
+case "$EXEC" in
+*.AppImage|flatpak|*/flatpak|/var/lib/flatpak/exports/bin/*) ;;
 dbus-daemon) ;; # Landlock breaks xdg-desktop-portal, which fails to open /proc/%u/root
 *) SANDBOX=`command -v spot-sandbox` ;;
 esac