Flatsonar

BearBrowser

by SourceOS-Linux

SourceOS governed browser for humans and agents

Dangerous permissions Unverified publisher MPL-2.0
Install Source code

About

BearBrowser is a SourceOS governed browser with human-secure and agent-runtime profiles.

Permissions

3 permissions weaken the sandbox. Flatsonar asks before installing.

  • wildcard own-name org.bearbrowser.*: can impersonate system services
    --own-name=org.bearbrowser.*
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • full access to your home folder
    --filesystem=home
  • inter-process communication (needed for X11)
    --share=ipc
  • network
    --share=network
  • Wayland display
    --socket=wayland
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • audio
    --socket=pulseaudio
  • GPU acceleration
    --device=dri
  • access to your download folder
    --filesystem=xdg-download
  • keeps .bearbrowser between runs
    --persist=.bearbrowser
  • sets environment variable HOME_URL
    --env=HOME_URL=about:blank
  • sets environment variable STARTUP_HOMEPAGE
    --env=STARTUP_HOMEPAGE=about:blank
  • notifications
    --talk-name=org.freedesktop.Notifications
  • talks to org.gtk.vfs.*
    --talk-name=org.gtk.vfs.*

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • ai.sourceos.BearBrowser claims the domain sourceos.ai; only its owner can prove that
    publisher:namespace
  • installs a prebuilt binary instead of building from source
    source:prebuilt

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.