Proton

Permissions

6 permissions weaken the sandbox. Flatsonar asks before installing.

• full access to your entire file system

  --filesystem=host
• sandbox escape: can run commands on the host via flatpak-spawn

  --talk-name=org.freedesktop.Flatpak
• development features (ptrace, can inspect other processes in its sandbox)

  --allow=devel
• X11 display: X11 lets apps read input and windows of other apps

  --socket=x11
• full access to your home folder

  --filesystem=home
• dconf: all GNOME settings

  --talk-name=ca.desrt.dconf
• network

  --share=network
• inter-process communication (needed for X11)

  --share=ipc
• Wayland display

  --socket=wayland
• access to xdg-run/dconf

  --filesystem=xdg-run/dconf
• access to ~/.config/dconf

  --filesystem=~/.config/dconf:ro
• sets environment variable DCONF_USER_CONFIG_DIR

  --env=DCONF_USER_CONFIG_DIR=.config/dconf

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

• com.raggesilver.Proton claims the domain raggesilver.com; only its owner can prove that

  publisher:namespace
• git source tracks a moving branch: what gets built can change without the manifest changing (x10)

  source:unpinned
• installs a prebuilt binary instead of building from source

  source:prebuilt

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.