cosmic-flatpak

Permissions

4 permissions weaken the sandbox. Flatsonar asks before installing.

• sandbox escape: can run commands on the host via flatpak-spawn

  --talk-name=org.freedesktop.Flatpak
• full access to your home folder

  --filesystem=home
• access to operating-system files

  --filesystem=host-os:ro
• session management (logout, suspend)

  --system-talk-name=org.freedesktop.login1
• inter-process communication (needed for X11)

  --share=ipc
• Wayland display

  --socket=wayland
• X11 display, only when Wayland is unavailable

  --socket=fallback-x11
• network

  --share=network
• access to /run/media

  --filesystem=/run/media
• access to /var/lib/flatpak/exports/share

  --filesystem=/var/lib/flatpak/exports/share:ro
• access to xdg-data/applications

  --filesystem=xdg-data/applications:ro
• access to xdg-data/flatpak/exports/share

  --filesystem=xdg-data/flatpak/exports/share:ro
• access to xdg-data/icons

  --filesystem=xdg-data/icons:ro
• access to /sys

  --filesystem=/sys:ro
• talks to org.freedesktop.DBus

  --talk-name=org.freedesktop.DBus
• owns bus name com.github.hmrdsmoke.SoullessApplet

  --own-name=com.github.hmrdsmoke.SoullessApplet
• owns bus name com.github.hmrdsmoke.SoullessLauncher

  --own-name=com.github.hmrdsmoke.SoullessLauncher
• talks to com.system76.CosmicTheme.Mode

  --talk-name=com.system76.CosmicTheme.Mode
• talks to com.system76.CosmicTheme.Dark

  --talk-name=com.system76.CosmicTheme.Dark
• talks to com.system76.CosmicTk

  --talk-name=com.system76.CosmicTk
• GPU acceleration

  --device=dri

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

• packaged by github.com/pop-os, not by the com.github namespace owner; it does build the owner's code from https://github.com/hmrdsmoke/Soulless-Launcher

  publisher:namespace

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.