cosmic-flatpak
by pop-os
COSMIC Flatpak Repository
Broad permissions
Suspicious publisher
GPL-3.0
About
COSMIC Flatpak Repository
Permissions
2 permissions weaken the sandbox. Flatsonar asks before installing.
- talks to system service net.hadess.PowerProfiles
--system-talk-name=net.hadess.PowerProfiles - session management (logout, suspend)
--system-talk-name=org.freedesktop.login1 - Wayland display
--socket=wayland - inter-process communication (needed for X11)
--share=ipc - GPU acceleration
--device=dri - access to xdg-config/cosmic
--filesystem=xdg-config/cosmic:rw - access to /sys/class/power_supply
--filesystem=/sys/class/power_supply:ro - access to /sys/class/backlight
--filesystem=/sys/class/backlight:ro - talks to com.system76.CosmicSettingsDaemon
--talk-name=com.system76.CosmicSettingsDaemon
Who publishes this
Something concrete is wrong: the id claims a namespace this repository does not own, or the build does things a build should not. Flatsonar warns twice.
- com.github.pewmoe.cosmic-ext-ASCII-dot-battery claims the com.github.pewmoe namespace but is hosted by github.com/pop-os and does not build the owner's code
publisher:namespace
Maintenance
Recent activity on the upstream repository, or built and reviewed by Flathub.
No staleness signals: recent activity, or built and reviewed by Flathub.