Comment 16 for bug 1303962

Mediascanner does not do thumbnailing at all. All of that is done by the thumbnailer library + service. Those should be confined already, but in case they are not, here's the skinny:

- there are two kinds of thumbnails: those created from files and those that are downloaded (album art)
- for files, thumbnailer uses the global cache for unconfined apps and app-local dir for confined apps so it should work for everyone
- to get album art thumbnails you need to be able to access the dbus service (which I think is available for all applications as it's read only)
- the dbus service needs to be able to access the net and write to the cache dir (which it already can do, otherwise no album art would ever show up)