Ameen
by Hossam Hassan Majrashi
Desktop custodian for curl-pipe-sh installed packages
Extensive permissions
About
Ameen tells you which packages you have installed through install scripts (the curl ... | sh style), lets you update or uninstall them safely, and lets you install new packages by pasting their install command.
Permissions
3 permissions weaken the sandbox. Flatsonar asks before installing.
- sandbox escape: can run commands on the host via flatpak-spawn
--talk-name=org.freedesktop.Flatpak - X11 display: X11 lets apps read input and windows of other apps
--socket=x11 - full access to your home folder
--filesystem=home - inter-process communication (needed for X11)
--share=ipc - Wayland display
--socket=wayland - X11 display, only when Wayland is unavailable
--socket=fallback-x11 - network
--share=network - audio
--socket=pulseaudio - notifications
--talk-name=org.freedesktop.Notifications - system tray
--talk-name=org.kde.StatusNotifierWatcher - talks to org.ayatana.indicator.application
--talk-name=org.ayatana.indicator.application
Who publishes this
Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.
- com.h.ameen claims the domain h.com; only its owner can prove that
publisher:namespace - repository is 0 day(s) old with 0 star(s): no track record yet
publisher:new-repo
Maintenance
Recent activity on the upstream repository, or built and reviewed by Flathub.
No staleness signals: recent activity, or built and reviewed by Flathub.