Flatsonar

BrowserOS

by BrowserOS Team

The open-source agentic browser

Dangerous permissions Unverified publisher AGPL-3.0-only v137.0.7229.69
Install Source code
Screenshot 1 of BrowserOS

About

BrowserOS is a privacy-focused web browser built on Chromium, designed for modern web browsing with AI capabilities. It is a free and open-source alternative to ChatGPT Atlas, Perplexity Comet, and Dia. Features include: - Built-in AI agent for agentic web browsing - Privacy-focused with patches from ungoogled-chromium - Full Chromium compatibility for extensions and web standards - Support for local LLMs via Ollama and LM Studio

Permissions

11 permissions weaken the sandbox. Flatsonar asks before installing.

  • all devices (/dev): webcams, disks, raw hardware
    --device=all
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • smart card readers
    --socket=pcsc
  • talks to system service org.bluez
    --system-talk-name=org.bluez
  • talks to system service org.freedesktop.Avahi
    --system-talk-name=org.freedesktop.Avahi
  • your keyring / saved passwords
    --talk-name=org.freedesktop.secrets
  • access to operating-system files
    --filesystem=host-etc
  • access to unrecognised path 'home/.local/share/applications'
    --filesystem=home/.local/share/applications
  • access to unrecognised path 'home/.local/share/icons'
    --filesystem=home/.local/share/icons
  • dconf: all GNOME settings
    --talk-name=ca.desrt.dconf
  • sets GIO_EXTRA_MODULES: changes which libraries or plugins get loaded
    --env=GIO_EXTRA_MODULES=/app/lib/gio/modules
  • require-version 1.8.2
    --require-version=1.8.2
  • inter-process communication (needed for X11)
    --share=ipc
  • Wayland display
    --socket=wayland
  • audio
    --socket=pulseaudio
  • network
    --share=network
  • printing
    --socket=cups
  • Bluetooth
    --allow=bluetooth
  • access to xdg-run/pipewire-0
    --filesystem=xdg-run/pipewire-0
  • battery status
    --system-talk-name=org.freedesktop.UPower
  • talks to com.canonical.AppMenu.Registrar
    --talk-name=com.canonical.AppMenu.Registrar
  • talks to org.freedesktop.FileManager1
    --talk-name=org.freedesktop.FileManager1
  • notifications
    --talk-name=org.freedesktop.Notifications
  • screensaver inhibit
    --talk-name=org.freedesktop.ScreenSaver
  • talks to org.kde.kwalletd5
    --talk-name=org.kde.kwalletd5
  • talks to org.kde.kwalletd6
    --talk-name=org.kde.kwalletd6
  • session inhibit
    --talk-name=org.gnome.SessionManager
  • talks to org.gnome.ScreenSaver
    --talk-name=org.gnome.ScreenSaver
  • talks to org.gnome.Mutter.IdleMonitor.*
    --talk-name=org.gnome.Mutter.IdleMonitor.*
  • talks to org.cinnamon.ScreenSaver
    --talk-name=org.cinnamon.ScreenSaver
  • talks to org.mate.ScreenSaver
    --talk-name=org.mate.ScreenSaver
  • talks to org.xfce.ScreenSaver
    --talk-name=org.xfce.ScreenSaver
  • registers as a media player (MPRIS)
    --own-name=org.mpris.MediaPlayer2.browseros.*
  • access to /run/.heim_org.h5l.kcm-socket
    --filesystem=/run/.heim_org.h5l.kcm-socket
  • access to your desktop folder
    --filesystem=xdg-desktop
  • access to your download folder
    --filesystem=xdg-download
  • access to /tmp
    --filesystem=/tmp
  • keeps .pki between runs
    --persist=.pki
  • access to xdg-run/dconf
    --filesystem=xdg-run/dconf
  • access to ~/.config/dconf
    --filesystem=~/.config/dconf:ro
  • sets environment variable DCONF_USER_CONFIG_DIR
    --env=DCONF_USER_CONFIG_DIR=.config/dconf
  • sets environment variable GSETTINGS_BACKEND
    --env=GSETTINGS_BACKEND=dconf
  • access to ~/.config/kioslaverc
    --filesystem=~/.config/kioslaverc

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • com.browseros.BrowserOS claims the domain browseros.com; only its owner can prove that
    publisher:namespace
  • installs a prebuilt binary instead of building from source
    source:prebuilt