Skip to content

Ship a cross-desktop ignoreApps default - #62

Open
toxicphreAK wants to merge 2 commits into
opencloud-eu:mainfrom
toxicphreAK:split/ignore-apps
Open

Ship a cross-desktop ignoreApps default#62
toxicphreAK wants to merge 2 commits into
opencloud-eu:mainfrom
toxicphreAK:split/ignore-apps

Conversation

@toxicphreAK

@toxicphreAK toxicphreAK commented Aug 27, 2026

Copy link
Copy Markdown

Split out of #54.

The shipped ignoreApps list was KDE-only, so on GNOME/Cinnamon/MATE/Xfce nothing was blocked: browsing a folder downloaded everything in it, indexing downloaded the sync root.

Now covers the common file managers, the freedesktop thumbnailer convention, tracker/localsearch, gvfs helpers, updatedb and ClamAV. /usr/bin/dolphin moved from byName to an endsWith entry so it holds across distributions.

Two things I left alone on purpose:

  • This stays a deny-list. Enumerating every indexer, thumbnailer and antivirus doesn't converge — a permit-list of what should trigger a download is a smaller, more stable set, but that's your design call.
  • A blocked caller still gets EPERM. Whether ENODATA or serving placeholder content behaves better across thumbnailers has real tradeoffs.

The GNOME entries are checked against a live install (all four /usr/share/thumbnailers entries covered, including gnome-thumbnail-font, which doesn't match the -thumbnailer convention). KDE, Xfce, Cinnamon and MATE are from documentation and unverified — worth a second pair of eyes from someone running those.

Related: #59, #52.

The shipped config blocked only KDE components from triggering a
hydration, so on GNOME, Cinnamon, MATE or Xfce nothing was blocked at
all: nautilus and its thumbnailer helpers, tracker/localsearch, gvfsd
and the shell search providers open dehydrated files as a matter of
routine. Browsing a folder downloaded everything in it and indexing
downloaded the entire sync root -- silently, and on what is probably the
most common Linux desktop.

The list now covers the common file managers, the freedesktop
thumbnailer convention (a "thumbnailer" suffix catches the -thumbnailer
binaries and ffmpegthumbnailer alike), the GNOME/tracker and localsearch
indexers, gvfs helpers, locate's updatedb and ClamAV.

/usr/bin/dolphin moved from byName to an endsWith entry: matching the
binary name rather than an absolute path holds across distributions that
install elsewhere.

This is a starting point rather than an exhaustive list -- see
INTEGRATION.md. Enumerating every indexer, thumbnailer and antivirus in
existence does not converge, so a permit-list of the few applications
that should be allowed to trigger a download may scale better; that is a
design decision for the maintainers and is deliberately not attempted
here. The errno returned to a blocked caller is likewise left at EPERM.

@mgallien mgallien left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks
was planning to do it

@dragotin dragotin left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great, thanks for finding all these

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants