From 1bdd8448606a75beb303795f6c8e5ae4b8d19f2d Mon Sep 17 00:00:00 2001
From: Alibek Omarov <a1ba.omarov@gmail.com>
Date: Sat, 11 Feb 2023 03:36:07 +0300
Subject: [PATCH] scripts: flatpak: minimize filesystem permissions, add Steam
 Flatpak data directory

---
 scripts/flatpak/su.xash.Engine.Compat.i386.yml | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/scripts/flatpak/su.xash.Engine.Compat.i386.yml b/scripts/flatpak/su.xash.Engine.Compat.i386.yml
index 02a02ad7..5feeb369 100644
--- a/scripts/flatpak/su.xash.Engine.Compat.i386.yml
+++ b/scripts/flatpak/su.xash.Engine.Compat.i386.yml
@@ -16,10 +16,15 @@ finish-args:
   - --socket=x11
   - --socket=pulseaudio
   - --share=network
-  - --filesystem=~/.steam:ro
-  - --filesystem=~/.local/share/Steam:ro
-  - --filesystem=~/.xash:rw
-  - --filesystem=xdg-run/app/com.discordapp.Discord:create
+  # Steam library path on Ubuntu
+  - --filesystem=~/.steam/steam/steamapps/common:ro
+  # ... on SteamOS 3
+  - --filesystem=~/.local/share/Steam/steamapps/common:ro
+  # ... on Steam Flatpak
+  - --filesystem=~/.var/app/com.valvesoftware.Steam/.local/share/Steam/steamapps/common:ro
+  # allow talking with Discord for mods
+  # TODO: enable when somebody asks for it
+  # - --filesystem=xdg-run/app/com.discordapp.Discord:create
   - --device=all
   - --allow=multiarch
   - --allow=devel