VSCodium - Insiders

Permissions

7 permissions weaken the sandbox. Flatsonar asks before installing.

• all devices (/dev): webcams, disks, raw hardware

  --device=all
• full access to your entire file system

  --filesystem=host
• sandbox escape: can run commands on the host via flatpak-spawn

  --talk-name=org.freedesktop.Flatpak
• your SSH agent (can sign with your SSH keys)

  --socket=ssh-auth
• development features (ptrace, can inspect other processes in its sandbox)

  --allow=devel
• your keyring / saved passwords

  --talk-name=org.freedesktop.secrets
• session management (logout, suspend)

  --system-talk-name=org.freedesktop.login1
• inter-process communication (needed for X11)

  --share=ipc
• network

  --share=network
• X11 display, only when Wayland is unavailable

  --socket=fallback-x11
• audio

  --socket=pulseaudio
• Wayland display

  --socket=wayland
• access to xdg-run/gnupg

  --filesystem=xdg-run/gnupg:ro
• access to xdg-config/kdeglobals

  --filesystem=xdg-config/kdeglobals:ro
• talks to com.canonical.AppMenu.Registrar

  --talk-name=com.canonical.AppMenu.Registrar

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

• installs a prebuilt binary instead of building from source (x2)

  source:prebuilt
• verified on Flathub: the developer proved they control this app id

  publisher:flathub

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.