Flatsonar

resolve-flatpak

by night199uk

Flatpak packaging for Blackmagicdesign DaVinci Resolve

Dangerous permissions Unverified publisher MIT
Install Source code

About

Flatpak packaging for Blackmagicdesign DaVinci Resolve

Permissions

2 permissions weaken the sandbox. Flatsonar asks before installing.

  • sets LD_PRELOAD: injects code into every process in the sandbox
    --env=LD_PRELOAD=/lib/x86_64-linux-gnu/libglib-2.0.so.0 /lib/x86_64-linux-gnu/libgio-2.0.so.0 /lib/x86_64-linux-gnu/libgmodule-2.0.so.0 /lib/x86_64-linux-gnu/libgobject-2.0.so.0
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • inter-process communication (needed for X11)
    --share=ipc
  • network
    --share=network
  • audio
    --socket=pulseaudio
  • GPU acceleration
    --device=dri
  • access to your desktop folder
    --filesystem=xdg-desktop
  • access to your documents folder
    --filesystem=xdg-documents
  • access to your download folder
    --filesystem=xdg-download
  • access to your music folder
    --filesystem=xdg-music
  • access to your pictures folder
    --filesystem=xdg-pictures
  • access to your public-share folder
    --filesystem=xdg-public-share
  • access to your videos folder
    --filesystem=xdg-videos
  • access to /media
    --filesystem=/media
  • access to /run/media
    --filesystem=/run/media
  • access to xdg-run/gvfs
    --filesystem=xdg-run/gvfs
  • access to /mnt
    --filesystem=/mnt
  • keeps .local/share/DaVinciResolve between runs
    --persist=.local/share/DaVinciResolve
  • keeps Videos/CacheClip between runs
    --persist=Videos/CacheClip
  • keeps Videos/.gallery between runs
    --persist=Videos/.gallery
  • keeps Documents/BlackmagicDesign between runs
    --persist=Documents/BlackmagicDesign
  • sets environment variable RUSTICL_ENABLE
    --env=RUSTICL_ENABLE=radeonsi,iris,nouveau

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • com.blackmagic.Resolve claims the domain blackmagic.com; only its owner can prove that
    publisher:namespace
  • the build has network access: it can download things the manifest does not list
    resolve:build-options:--share=network

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.