Skip to content
Snippets Groups Projects
Commit a127fb49 authored by Simon McVittie's avatar Simon McVittie
Browse files

wrap-setup: Bind-mount in the AT-SPI accessibility bus


AT-SPI has its own private D-Bus message bus, the "accessibility bus".
This is used to let applications export their window contents to
assistive technologies such as screen readers, and to let assistive
technologies send events to the applications. This avoids flooding the
session bus with AT-SPI traffic, which can be rather frequent.

If we want `steamwebhelper` to be accessible to assistive technologies,
it needs to be able to communicate with that bus. In older AT-SPI it
was an abstract AF_UNIX socket, which passes through "naturally",
but in newer AT-SPI it has been changed to be a filesystem-backed
AF_UNIX socket in order to allow sandboxing, therefore the socket needs
to be bind-mounted into our container.

As with the session bus, we can adapt Flatpak's code for this: Flatpak
would always use a proxy in order to impose a security boundary, but
pressure-vessel is specifically not a security boundary, so we can
simplify considerably.

steamrt/tasks#699

Signed-off-by: default avatarSimon McVittie <smcv@collabora.com>
parent 7eba31b0
No related branches found
No related tags found
1 merge request!799run-dbus: Don't call GetAddress() if AT_SPI_BUS_ADDRESS is set
Checking pipeline status
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment