Restrict default filesystem access to ~/.MakeMKV and ~/Videos

[joshua-stone]

Qt can use the file picker portal to gain write access to specific directories from within the sandbox.

This seems to work for scenarios like:

• setting alternative data directories
• writing files to external drives

[flathubbot]

Started test build 83180

[flathubbot]

Build 83180 successful
To test this build, install it from the testing repository:

flatpak install --user https://dl.flathub.org/build-repo/65815/com.makemkv.MakeMKV.flatpakref

[joshua-stone]

Filesystem access can be tested by setting a data directory through the file picker:

$ flatpak run --nofilesystem=home --filesystem='~/.MakeMKV:create' com.makemkv.MakeMKV

Then run find on the directory:

$ flatpak run --nofilesystem=home --filesystem='~/.MakeMKV:create' --command=sh com.makemkv.MakeMKV -c 'grep app_DataDir ~/.MakeMKV/settings.conf | cut -f2 -d \" | xargs find'
/run/user/1000/doc/7a8a5adb/.MakeMKV.test
/run/user/1000/doc/7a8a5adb/.MakeMKV.test/_private_data.tar

[flathubbot]

Started test build 83597

[flathubbot]

Build 83597 successful
To test this build, install it from the testing repository:

flatpak install --user https://dl.flathub.org/build-repo/66230/com.makemkv.MakeMKV.flatpakref

[nalsai]

Wouldn't persist instead of filesystem be better for ~/.MakeMKV, or is there a reason it needs filesystem?

[flathubbot]

Started test build 130227

[flathubbot]

Build 130227 failed

[albertescanes]

Access to just xdg-videos and a persistent for ~/.MakeMKV sounds very good to me as well. Any chance we can get this merged ?