Flatsonar

com.vcvrack.Rack

by philipreinken

manifest for building vcvrack as a flatpak

Dangerous permissions Unverified publisher GPL-3.0

About

manifest for building vcvrack as a flatpak

Permissions

2 permissions weaken the sandbox. Flatsonar asks before installing.

  • all devices (/dev): webcams, disks, raw hardware
    --device=all
  • full access to your home folder
    --filesystem=home
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • network
    --share=network
  • inter-process communication (needed for X11)
    --share=ipc
  • GPU acceleration
    --device=dri
  • audio
    --socket=pulseaudio

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • com.vcvrack.Rack claims the domain vcvrack.com; only its owner can prove that
    publisher:namespace
  • fetches from ftp.gnu.org over unencrypted http: anyone on the path can swap the bytes (x2)
    source:insecure-url
  • the build has network access: it can download things the manifest does not list
    rack:build-options:--share=network

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.