Flatsonar

Mattermost

by Mattermost, Inc.

An open source platform for developer collaboration

Dangerous permissions Flathub reviewed Apache-2.0 v6.3.0
Screenshot 1 of Mattermost Screenshot 2 of Mattermost Screenshot 3 of Mattermost Screenshot 4 of Mattermost

About

Mattermost is a secure collaboration platform that is open, flexible, and deeply integrated with the tools you love. An alternative to SaaS collaboration solutions, Mattermost is built explicitly for developer teams, tools, and workflows. It is written in Golang and React and runs as a production-ready Linux binary under an MIT license with either MySQL or Postgres.

Permissions

5 permissions weaken the sandbox. Flatsonar asks before installing.

  • all devices (/dev): webcams, disks, raw hardware
    --device=all
  • smart card readers
    --socket=pcsc
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • full access to your home folder
    --filesystem=home
  • your keyring / saved passwords
    --talk-name=org.freedesktop.secrets
  • inter-process communication (needed for X11)
    --share=ipc
  • network
    --share=network
  • audio
    --socket=pulseaudio
  • Wayland display
    --socket=wayland
  • talks to org.kde.kwalletd
    --talk-name=org.kde.kwalletd
  • talks to org.kde.kwalletd5
    --talk-name=org.kde.kwalletd5
  • notifications
    --talk-name=org.freedesktop.Notifications
  • system tray
    --talk-name=org.kde.StatusNotifierWatcher
  • talks to org.kde.kwalletd6
    --talk-name=org.kde.kwalletd6
  • talks to com.canonical.AppMenu.Registrar
    --talk-name=com.canonical.AppMenu.Registrar

Who publishes this

On Flathub: the manifest was reviewed and built on Flathub's infrastructure, but the developer has not verified ownership of the app id.

  • installs a prebuilt binary instead of building from source (x2)
    source:prebuilt
  • on Flathub: manifest reviewed and built by Flathub; the developer has not verified the app id
    publisher:flathub

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.