Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Explain access to bluez and NetworkManager #115

Open
hadess opened this issue Jun 26, 2020 · 9 comments
Open

Explain access to bluez and NetworkManager #115

hadess opened this issue Jun 26, 2020 · 9 comments

Comments

@hadess
Copy link

hadess commented Jun 26, 2020

Skype wants to talk to NetworkManager and bluez. This could allow it to change the network configuration, request Wi-Fi scans, and scan for local Bluetooth devices, which it really shouldn't need to do:

        "--system-talk-name=org.freedesktop.NetworkManager",
        "--system-talk-name=org.bluez",
@WhyNotHugo
Copy link

WhyNotHugo commented Feb 19, 2021

It's safe to remove this permissions using overrides (Skype works fine for me doing so). There are many packages that include extremely open permissions, so it's generally a good idea to review them anyway.

Keep in mind that Skype also has unlimited access to your filesystem by default, so you probably want to override access to $HOME too.

@hadess
Copy link
Author

hadess commented Feb 19, 2021

It's safe to remove this permissions using overrides (Skype works fine for me doing so). There are many packages that include extremely open permissions, so it's generally a good idea to review them anyway.

Wrong way around.

It shouldn't need to do this, not without justification.

I would also really prefer one of the collaborators on this repository to comment, rather than somebody not associated with it.

@WhyNotHugo
Copy link

Wrong way around.

Welcome to the internet, where not everything is perfect.

There's plenty of flatpak apps with too open permissions. While I'd love for them to be fixed, by advise is that you override them yourself until that happens (if ever).

Keep in mind though, Skype also has access to your keys, filesystem and can completely hijack your user session, so those permissions should be the least of your concerns.

I would also really prefer one of the collaborators on this repository to comment, rather than somebody not associated with it.

That seems to happen once every many, many months, so good luck.

@hadess
Copy link
Author

hadess commented Feb 19, 2021

Keep in mind though, Skype also has access to your keys, filesystem and can completely hijack your user session, so those permissions should be the least of your concerns.

It has access to nothing, it's not installed on my system.

@hadess
Copy link
Author

hadess commented Mar 16, 2022

@FakeShemp can you comment on this please?

@FakeShemp
Copy link
Collaborator

@hadess What do you want to know?

@hadess
Copy link
Author

hadess commented Mar 16, 2022

@hadess What do you want to know?

I'm still looking for an answer about the original question.

@FakeShemp
Copy link
Collaborator

There is no question in the original post. I also didn't create this manifest so I don't know what those options are there for.

@FakeShemp
Copy link
Collaborator

@alexlarsson seems to be the one who added it.

3b9639c

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants