1aff64a38b
For sandboxed apps, permission to talk to org.freedesktop.Notifications looks innocent enough. However as all exported services share the same connection to the session bus, that permission actually grants an app access to *any* shell D-Bus API. While we want apps to use the notification portal, it is still common for apps to use libnotify, raw D-Bus calls or even notify-send. We don't want to give those apps a way to circumvent most of the sandbox restrictions, so stop owning the org.freedesktop.Notifications name. In a next step we will implement a separate notification-daemon that exposes the API on the well-known address and proxies any requests to the real implementation in gnome-shell. https://gitlab.gnome.org/GNOME/gnome-shell/merge_requests/547
GNOME Shell
GNOME Shell provides core user interface functions for the GNOME 3 desktop, like switching to windows and launching applications. GNOME Shell takes advantage of the capabilities of modern graphics hardware and introduces innovative user interface concepts to provide a visually attractive and easy to use experience.
For more information about GNOME Shell, including instructions on how to build GNOME Shell from source and how to get involved with the project, see the project wiki.
Bugs should be reported to the GNOME bug tracking system.
Contributing
To contribute, open merge requests at https://gitlab.gnome.org/GNOME/gnome-shell.
Commit messages should follow the GNOME commit message guidelines. We require an URL to either an issue or a merge request in each commit.
License
GNOME Shell is distributed under the terms of the GNU General Public License, version 2 or later. See the COPYING file for details.