com.system76.CosmicStore

Permissions

7 permissions weaken the sandbox. Flatsonar asks before installing.

• sandbox escape: can run commands on the host via flatpak-spawn

  --talk-name=org.freedesktop.Flatpak
• sets LD_LIBRARY_PATH: changes which libraries or plugins get loaded

  --env=LD_LIBRARY_PATH=/app/lib
• read-only access to your entire file system

  --filesystem=host:ro
• talks to system service org.freedesktop.Flatpak.SystemHelper

  --system-talk-name=org.freedesktop.Flatpak.SystemHelper
• your keyring / saved passwords

  --talk-name=org.freedesktop.secrets
• systemd: can manage services

  --talk-name=org.freedesktop.systemd1
• package management

  --talk-name=org.freedesktop.PackageKit
• inter-process communication (needed for X11)

  --share=ipc
• network

  --share=network
• X11 display, only when Wayland is unavailable

  --socket=fallback-x11
• Wayland display

  --socket=wayland
• GPU acceleration

  --device=dri
• access to /var/lib/flatpak

  --filesystem=/var/lib/flatpak
• access to xdg-data/flatpak

  --filesystem=xdg-data/flatpak
• access to xdg-config/systemd

  --filesystem=xdg-config/systemd:ro
• access to /var/tmp

  --filesystem=/var/tmp
• access to ~/.var/app

  --filesystem=~/.var/app
• talks to org.freedesktop.Accounts

  --talk-name=org.freedesktop.Accounts
• notifications

  --talk-name=org.freedesktop.Notifications
• talks to org.freedesktop.fwupd

  --talk-name=org.freedesktop.fwupd

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

• com.system76.CosmicStore claims the domain system76.com; only its owner can prove that

  publisher:namespace

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.