Flatsonar

@NAME@

by Felix Häcker

Discover new Flatpaks

Dangerous permissions Unverified publisher GPL-3.0-or-later v0.0
Install Source code

Support the creators

Flatsonar is just the shop window. The people below made @NAME@.

Liberapay
Screenshot 1 of @NAME@ Screenshot 2 of @NAME@ Screenshot 3 of @NAME@

About

Souk is an App Store that allows you to discover, search, install and update your Flatpaks.

Permissions

5 permissions weaken the sandbox. Flatsonar asks before installing.

  • full access to your entire file system
    --filesystem=host
  • sandbox escape: can run commands on the host via flatpak-spawn
    --talk-name=org.freedesktop.Flatpak
  • talks to system service org.freedesktop.Flatpak.SystemHelper
    --system-talk-name=org.freedesktop.Flatpak.SystemHelper
  • authorisation (polkit)
    --system-talk-name=org.freedesktop.PolicyKit1
  • talks to system service org.freedesktop.Accounts
    --system-talk-name=org.freedesktop.Accounts
  • network
    --share=network
  • inter-process communication (needed for X11)
    --share=ipc
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • Wayland display
    --socket=wayland
  • GPU acceleration
    --device=dri
  • access to /var/lib/flatpak
    --filesystem=/var/lib/flatpak/
  • access to ~/.local/share/flatpak
    --filesystem=~/.local/share/flatpak:rw
  • access to /var/tmp
    --filesystem=/var/tmp:rw
  • access to /var/lib/flatpak
    --filesystem=/var/lib/flatpak
  • access to /var/tmp
    --filesystem=/var/tmp
  • access to /tmp
    --filesystem=/tmp
  • talks to org.gtk.vfs.*
    --talk-name=org.gtk.vfs.*
  • access to xdg-run/gvfsd
    --filesystem=xdg-run/gvfsd
  • sets environment variable RUST_LOG
    --env=RUST_LOG=souk=debug
  • sets environment variable RUST_BACKTRACE
    --env=RUST_BACKTRACE=1
  • sets environment variable GOBJECT_DEBUG
    --env=GOBJECT_DEBUG=instance-count
  • sets environment variable WORKER_AS_SUBPROCESS
    --env=WORKER_AS_SUBPROCESS=1

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • https://gitlab.gnome.org/bertob/souk also publishes this app id
    publisher:collision
  • https://gitlab.gnome.org/bragefuglseth/souk also publishes this app id
    publisher:collision
  • de.haeckerfelix.Souk claims the domain haeckerfelix.de; only its owner can prove that
    publisher:namespace
  • the build has network access: it can download things the manifest does not list
    build-options:--share=network

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.