cosmic-flatpak

Permissions

7 permissions weaken the sandbox. Flatsonar asks before installing.

• unrestricted access to the system D-Bus (system services, hardware)

  --socket=system-bus
• unrestricted access to the session D-Bus (all your running apps)

  --socket=session-bus
• sandbox escape: can run commands on the host via flatpak-spawn

  --talk-name=org.freedesktop.Flatpak
• talks to system service org.freedesktop.Accounts

  --system-talk-name=org.freedesktop.Accounts
• session management (logout, suspend)

  --system-talk-name=org.freedesktop.login1
• read-only access to your entire file system

  --filesystem=host:ro
• access to operating-system files

  --filesystem=host-os:ro
• Wayland display

  --socket=wayland
• X11 display, only when Wayland is unavailable

  --socket=fallback-x11
• inter-process communication (needed for X11)

  --share=ipc
• access to xdg-config/cosmic

  --filesystem=xdg-config/cosmic:rw
• talks to com.system76.CosmicSettingsDaemon

  --talk-name=com.system76.CosmicSettingsDaemon
• GPU acceleration

  --device=dri
• portal Desktop

  --talk-name=org.freedesktop.portal.Desktop
• portal Location

  --talk-name=org.freedesktop.portal.Location
• portal *

  --talk-name=org.freedesktop.portal.*
• screensaver inhibit

  --talk-name=org.freedesktop.ScreenSaver
• sets environment variable XDG_DATA_DIRS

  --env=XDG_DATA_DIRS=/run/host/usr/share:/var/lib/flatpak/exports/share:/app/share:${HOME}/.local/share/flatpak/exports/share:${HOME}/.local/share
• access to /var/lib/flatpak/exports/share/applications

  --filesystem=/var/lib/flatpak/exports/share/applications:ro
• access to /var/lib/flatpak/app

  --filesystem=/var/lib/flatpak/app:ro
• access to /var/lib/flatpak/exports/share/icons

  --filesystem=/var/lib/flatpak/exports/share/icons:ro
• access to ~/.local/share/flatpak/exports/share/applications

  --filesystem=~/.local/share/flatpak/exports/share/applications:ro
• access to ~/.local/share/flatpak/app

  --filesystem=~/.local/share/flatpak/app:ro
• access to ~/.local/share/flatpak/exports/share/icons

  --filesystem=~/.local/share/flatpak/exports/share/icons:ro
• access to ~/.local/share/applications

  --filesystem=~/.local/share/applications:ro
• access to ~/.local/share/icons

  --filesystem=~/.local/share/icons:ro
• access to /run/current-system/sw/bin

  --filesystem=/run/current-system/sw/bin:ro

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

• com.championpeak87.cosmic-ext-classic-menu claims the domain championpeak87.com; only its owner can prove that

  publisher:namespace

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.