On Wed, Jun 30, 2021 at 2:31 PM Michael Catanzaro <mcatanzaro(a)gnome.org>
wrote:
I believe hardening flags are added in by flatpak-builder. I think
they
somehow come from the runtime, though I'm not sure exactly how.
(Anybody know?)
Yes: there's a flatpak-builder config file in
/etc/flatpak-builder/defaults.json that's part of the runtime that adds the
hardening flags.
--
Kalev