Grant network access so update checks can reach GitHub (#5189)

This commit is contained in:
Dylan M. Taylor
2026-10-28 13:17:18 -04:00
committed by GitHub
parent 75360d1d7d
commit 67d4f18179
2 changed files with 8 additions and 6 deletions
@@ -30,9 +30,10 @@ finish-args:
# passed by path (the command line, Open Recent, "Save" next to the original) work there.
- --filesystem=xdg-documents
- --filesystem=xdg-download
# Deliberately not granted: network (Flatpak installs update through flatpak, so Help ▸ Check
# for updates reports that GitHub is unreachable; the optional --control channel listens on
# 127.0.0.1 inside the sandbox) and home/host filesystem access. No CUPS socket either: printing
# Network: Help ▸ Check for updates reaches GitHub. The optional --control channel still listens
# on 127.0.0.1 inside the sandbox.
- --share=network
# Deliberately not granted: home/host filesystem access. No CUPS socket either: printing
# runs the `lp` command (crates/print), which the freedesktop runtime doesn't ship, so Print
# reports that the spooler is unavailable until it goes through the print portal.
modules:
@@ -31,9 +31,10 @@ finish-args:
# passed by path (the command line, Open Recent, "Save" next to the original) work there.
- --filesystem=xdg-documents
- --filesystem=xdg-download
# Deliberately not granted: network (Flatpak installs update through flatpak, so Help ▸ Check
# for updates reports that GitHub is unreachable; the optional --control channel listens on
# 127.0.0.1 inside the sandbox) and home/host filesystem access. No CUPS socket either: printing
# Network: Help ▸ Check for updates reaches GitHub. The optional --control channel still listens
# on 127.0.0.1 inside the sandbox.
- --share=network
# Deliberately not granted: home/host filesystem access. No CUPS socket either: printing
# runs the `lp` command (crates/print), which the freedesktop runtime doesn't ship, so Print
# reports that the spooler is unavailable until it goes through the print portal.
build-options: