From e48164991c328a48ca16c6b245097d90c42d539d Mon Sep 17 00:00:00 2001
From: proletarius101 <54175165+proletarius101@users.noreply.github.com>
Date: Tue, 2 May 2023 14:44:55 +0000
Subject: [PATCH] chore: request less permission for dconf access

According to https://docs.flatpak.org/en/latest/sandbox-permissions.html?highlight=dconf#dconf-access, DConf access doesn't require file system access as board as `--filesystem=host`. More strict permission requests help keep things safe.
---
 flatpak/io.geph.GephGui.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/flatpak/io.geph.GephGui.yml b/flatpak/io.geph.GephGui.yml
index 00d3b11..421a0d1 100644
--- a/flatpak/io.geph.GephGui.yml
+++ b/flatpak/io.geph.GephGui.yml
@@ -57,7 +57,7 @@ finish-args:
   # Needed for OpenGL
   - --device=dri
   # DConf access for configuring proxies
-  - --filesystem=host:rw
+  - --filesystem=xdg-run/dconf
   - --talk-name=ca.desrt.dconf
   - --talk-name=org.freedesktop.Flatpak
   - --env=DCONF_USER_CONFIG_DIR=.config/dconf