Flatsonar

CubicSDR-flatpak

by cjcliffe

Flatpak build scripts for CubicSDR

Dangerous permissions Unverified publisher GPL-3.0
Install Source code

About

Flatpak build scripts for CubicSDR

Permissions

3 permissions weaken the sandbox. Flatsonar asks before installing.

  • all devices (/dev): webcams, disks, raw hardware
    --device=all
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • full access to your home folder
    --filesystem=/home
  • inter-process communication (needed for X11)
    --share=ipc
  • network
    --share=network
  • GPU acceleration
    --device=dri
  • audio
    --socket=pulseaudio

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • com.cubicsdr.App claims the domain cubicsdr.com; only its owner can prove that
    publisher:namespace
  • git source tracks a moving branch: what gets built can change without the manifest changing (x17)
    source:unpinned
  • fetches from git.osmocom.org over unencrypted git: anyone on the path can swap the bytes (x2)
    source:insecure-url

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.