flatpak/xdg-desktop-portal

Portal for GPG encryption/decryption

Opened this issue · 7 comments

AdrianKoshka commented

Heyo, I recently made Thunderbird available as a fatpak on flathub, but right now Enigmail/GnuPG functionality doesn't work. I don't want to expose the entire gpg directory, keys and all, to applications for it though if possible.

bilelmoussaoui commented

That would be awesome! I need this in order to encrypt some sensitive data using a private/public key. Currently, I had to give the application a full access to ~.gnupg directory, which is not a good solution at all...

  • 👍2
A6GibKm commented

Same issue while trying to do a variety of tasks in emacs, signing commits, read a password from a encrypted file, etc.

TingPing commented

To make progress here I'd say an application that relies on this needs to write out its API needs (and ideally make an implementation).

  • 👍4
muelli commented

seems nobody has suggested to use the Seahorse API just yet, but it may be worth a shot.

  • 👍1
RomanRiabenko commented

--socket=gpg-agent was added with flatpak/flatpak#4958 in version 1.14.0.

TingPing commented

I don't believe that invalidates this issue. gpg-socket is a sandbox bypass and not a portal.

  • 👍1
nanonyme commented

@TingPing does the agent leak secret material to sandbox though? If not, the difference isn't that big.