From b4a74b0fa4b14fae334bb6d2fb5c732127773979 Mon Sep 17 00:00:00 2001 From: Philip Withnall Date: Wed, 9 Dec 2020 16:08:52 +0000 Subject: [PATCH] accounts-service: Allow installation to the system repo by default Note that this permissions check only concerns parental controls. If the system flatpak polkit policy disallows installation to the system repo (or requires an administrator password for it), this setting cannot override that. The default was previously to disallow installation, because the flatpak polkit policy was previously overridden by these settings. How parental controls are checked in flatpak has evolved since then, though. See: https://github.com/flatpak/flatpak/issues/3995 Signed-off-by: Philip Withnall --- .../com.endlessm.ParentalControls.AppFilter.xml | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/accounts-service/com.endlessm.ParentalControls.AppFilter.xml b/accounts-service/com.endlessm.ParentalControls.AppFilter.xml index 98b65d1..84cd96d 100644 --- a/accounts-service/com.endlessm.ParentalControls.AppFilter.xml +++ b/accounts-service/com.endlessm.ParentalControls.AppFilter.xml @@ -69,7 +69,7 @@ installation can proceed. If this is false, the user is not allowed to install any apps or runtimes - to their flatpak user repository. + to their flatpak user repository due to parental controls. --> @@ -80,14 +80,15 @@ Whether this user is allowed to install to the flatpak system repository. If this is true, and if the polkit check for allowing app installation - succeeds, and if the OarsFilter does not restrict this app, app + succeeds (i.e. the user is an administrator or an administrator has given + permission), and if the OarsFilter does not restrict this app, app installation can proceed. If this is false, the user is not allowed to install any apps or runtimes - to the flatpak system repository. + to the flatpak system repository due to parental controls. --> - +