Consider removing full filesystem access

[pabl0]

Why there is need for --filesystem=host by default, especially since it looks like VLC supports portals and can play media without any direct access outside of the app sandbox? Is it needed for some "sidecar" files like subtitles?

[TingPing]

The subtitle case indeed won't work automatically, though the user can usually manually load them.

[ePirat]

@pabl0 How would that work for command-line usage of VLC? Is Flatpak doing some magic there to look for paths in the command line?

Also what about writing files like screenshots? Would that "just work" or would the user need to first configure the path explicitly using a portal dialog for this to work?

[TingPing]

@pabl0 How would that work for command-line usage of VLC? Is Flatpak doing some magic there to look for paths in the command line?

It isn't automatic, you have to do flatpak run $appid --file-forwarding @@ /path/to/a/file @@

Also what about writing files like screenshots? Would that "just work" or would the user need to first configure the path explicitly using a portal dialog for this to work?

The app has to open a save dialog each time.