Accessing a specific location

[Olivier Tilloy]

On Thu, Jun 2, 2016 at 6:20 PM, Bertrand CHEVRIER
<chevrier.bertrand at gmail.com> wrote:
> Hi,
>
> I'm in the process of developing a scope. The goal is to list the bookmarks
> from the webbrowser-app.
>
> After reading the documentation and reading the setting up my environment,
> this seems pretty straight forward, except that I don't know how to access
> the bookmark database within a confined env.
>
> Basically I need to read (or copy) the file
> /home/phablet/.local/share/webbrowser-
> app/bookmarks.sqlite
>
> I went through the documentation of the AppArmor but it seems none of the
> policy group allows me to do that, right ?
>
> So what would be the way to access this file (in read only) from my scope ?

That’s not allowed for confined applications/scopes.
Only webbrowser-app (and unconfined processes) is allowed to
read/write to /home/phablet/.local/share/webbrowser-app/.

What would be needed is for the browser to grow a content export
capability to expose its bookmarks database. That feature doesn’t
exist at the moment and isn’t planned though.

Another approach would be to have that scope be part of the
webbrowser-app package, so that it gets the same permissions as the
browser app.

Cheers,

 Olivier