Fixes #112

See also: https://github.com/flatpak/flatpak/issues/2782

Florian Müllner authored Feb 26, 2018 and Scott Reeves committed May 01, 2018

https://bugzilla.gnome.org/show_bug.cgi?id=793854

Laurent Bigonville authored Feb 05, 2018 and Bastien Nocera committed Feb 06, 2018

seccomp isn't currently supported on all the Linux architectures, see:
https://github.com/seccomp/libseccomp/blob/master/src/arch.c

Only disable seccomp on architectures where it's not supported, keeping it
enabled on all the other (Linux) ones.

https://bugzilla.gnome.org/show_bug.cgi?id=786358

Dominique Leuenberger authored Sep 02, 2017 and Bastien Nocera committed Sep 12, 2017

As not all distros have libs moves from /lib(64)? to /usr/lib(64), we need
to also bind-mount those directories, or the thumbnailers will fail to load
the required libraries.

https://bugzilla.gnome.org/show_bug.cgi?id=787072

The gsf-office-thumbnailer expects a local file path to be passed, but
instead of treating one of expand_thumbnailing_elem()'s arguments as a
local path (which it is), we treated it as a URI and tried to convert it
to a URI.

That obviously failed, and the thumbnailer wasn't even launched.

https://bugzilla.gnome.org/show_bug.cgi?id=787249

https://bugzilla.gnome.org/show_bug.cgi?id=787249

And loads of other non-thumbnailable files in a regression introduced in
3b298f60. To answer _can_thumbnail() correctly, we need to check whether
a thumbnailer exists for the mime-type in question, not simply assume it
to be available.

https://bugzilla.gnome.org/show_bug.cgi?id=785404

Was not supposed to be in the commit.

Rather than display an image in a GTK+ window, behave like stand-alone
thumbnailers and generate an output file. This makes it easier to
compare stand-alone thumbnailers with ones wrapped in gnome-desktop.

The variable is set to a function return 2 lines below.

Pass G_MESSAGES_DEBUG=all to thumbnailers if the debug is enabled.

No need to attempt connecting to gvfs inside the sandbox, it will not be
accessible.

The release was wrongly numbered with a "sub" number of 1. Modify the
NEWS file to match the version number actually used.

So that it's not missed, repeatedly, by whoever updates the
configure.ac.

When running sandboxed, we could make use "--tmpfs /tmp" to make
/tmp disappear along with the thumbnailer, but that would just paper
over the fact that those same discarded temporary files would be left in
/tmp (RAM if tmpfs) when not sandboxed.

So warn about badly behaved thumbnailers.

https://bugzilla.gnome.org/show_bug.cgi?id=785238

The fd that bwrap copies from the --file argument needs to be cleaned up
as well, otherwise the temporary file as well as the directory
containing it will be left on disk.

https://bugzilla.gnome.org/show_bug.cgi?id=786584

Instead of copying whole files to the sandbox, bind mount the _file_.
This is especially important when dealing with huge files when only a
tiny portion of the file will actually be read.

https://bugzilla.gnome.org/show_bug.cgi?id=786586

https://bugzilla.gnome.org/show_bug.cgi?id=786355

Mohammed Sadiq authored Jun 16, 2017 and Bastien Nocera committed Aug 22, 2017

https://bugzilla.gnome.org/show_bug.cgi?id=783849

https://bugzilla.gnome.org/show_bug.cgi?id=785963

Makes it easier to debug.

https://bugzilla.gnome.org/show_bug.cgi?id=785963

script_exec_new() can fail in certain cases, and we should not crash
when trying to expand the script command later if the initial setup
failed.

https://bugzilla.gnome.org/show_bug.cgi?id=785963