main/postmarketos-config-nftables: add rule for localsend
This should permit to make the localsend app to work OOTB.
Tested the logic by manually applying the rules:
sudo nft add rule inet filter input tcp dport 53317 accept
sudo nft add rule inet filter input udp dport 53317 acceptI think I can't really test the nftable file as I'm daily driving pmOS duranium.
PR inspired by !6221 (merged). That's why I haven't added an install_if directive as the app have a flatpak package.
It would be good to have a nicer way (distro-wide) to setup firewall requirements for flatpak apps.
@fossdd on matrix added a link to https://github.com/flatpak/flatpak/issues/1759 and @craftyguy added a link a to https://github.com/flatpak/flatpak/issues/5964.
And just for reference, Fedora isn't "impacted" by this because by default they open all the ports >= 1025. I don't know if it could works/be wanted for pmOS but they do that to have a nice OOTB experience. Because one of the worst problems for an average user is to have an app failing without "any reason". It's even more true when the app doesn't come with an UI to check ports/explaing the thing (like Localsend). According to https://postmarketos.org/state/: "The goal is to make postmarketOS usable for everyone". So maybe something to consider?