Flatsonar

flatpaks

by axtloss

random stuff i packaged as flatpak

Dangerous permissions Suspicious publisher GPL-3.0
Install Source code

About

random stuff i packaged as flatpak

Permissions

3 permissions weaken the sandbox. Flatsonar asks before installing.

  • sandbox escape: can run commands on the host via flatpak-spawn
    --talk-name=org.freedesktop.Flatpak
  • all devices (/dev): webcams, disks, raw hardware
    --device=all
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • Wayland display
    --socket=wayland
  • inter-process communication (needed for X11)
    --share=ipc
  • network
    --share=network
  • sets environment variable SCRCPY_SERVER_PATH
    --env=SCRCPY_SERVER_PATH=/app/share/scrcpy/scrcpy-server

Who publishes this

Something concrete is wrong: the id claims a namespace this repository does not own, or the build does things a build should not. Flatsonar warns twice.

  • com.github.remoteandroid.redroid claims the com.github.remoteandroid namespace but is hosted by github.com/axtloss and does not build the owner's code
    publisher:namespace
  • tries to escalate privileges: install -Dm755 sudo.sh /app/bin/sudo
    redroid:build-commands

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.