Flatpak not respecting settings

Leap 15.5 KDE (wayland)

Fresh install yesterday (net-install, for testing only, fully patched/updated, standard repos - no Packman etc., basic settings/no changes applied). Same observed on 5 local machines (in production/various HW and with different settings applied).

Attempts to reset or restrict permissions via KDE (System Settings-> Programs → Flatpak Permission Settings) or Flatseal or command-line (user and/or global) not working. Delete, erase and re-install Flatpak not working.

Testet with several Flatpak apps - same result.

Some of the denied permissions ignored (apps still have full /home access and are running in the background):

  • running in the background
  • file system access

Denied setting that actually does work:

  • Internet Connection
user2@a001:~> flatpak permissions
Table             Object                       App             Permissions                  Data
desktop-used-apps image/tiff                                                                0x00
desktop-used-apps application/xml                                                       0x00
desktop-used-apps application/pdf                                                        0x00
desktop-used-apps image/png                                                               0x00
desktop-used-apps text/plain                                                                 0x00
desktop-used-apps image/jpeg                                                               0x00
desktop-used-apps application/x-raw-disk-image                                   0x00
desktop-used-apps application/x-ole-storage                                          0x00
notifications     notification                                                                      0x00

SUDO not working on this machine (new problem today), but had no affect on test machine:

user2@a001:~> sudo flatpak permission-reset --all
user2@a001:~> error: Cannot autolaunch D-Bus without X11 $DISPLAY
user2@a001:~> sudo flatpak permissions
user2@a001:~> error: Cannot autolaunch D-Bus without X11 $DISPLAY

No Flatpak related errors in journal, but a couple of (unrelated ?) warnings:

  • Unable to start p11-kit server: Sub-process closed with code 2
  • file:///usr/share/kpackage/kcms/kcm_flatpak/contents/ui/permissions.qml:243:21: Unable to assign FlatpakPolicy to QString

How to rectify/nail down the culprit ?