summaryrefslogtreecommitdiff
path: root/staging/security-context/engines.md
blob: 3a7d13f104131fd49ff3a988cd97fa28ac97a55d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
# security-context-v1 engines

This document describes how some specific engine implementations populate the
metadata in security-context-v1 and provide further metadata with out of band
mechanisms.

## [Flatpak]

* `sandbox_engine` is always set to `flatpak`.
* `app_id` is the Flatpak application ID (in reverse-DNS style). It is always
  set.
* `instance_id` is the Flatpak instance ID of the running sandbox. It is always
  set.

More metadata is stored in `$XDG_RUNTIME_DIR/.flatpak/$instance_id/info`. This
file will be readable when `wp_security_context_v1.commit` is called.

[Flatpak]: https://flatpak.org/