cosmic-flatpak

Permissions

5 permissions weaken the sandbox. Flatsonar asks before installing.

• unrestricted access to the system D-Bus (system services, hardware)

  --socket=system-bus
• unrestricted access to the session D-Bus (all your running apps)

  --socket=session-bus
• sandbox escape: can run commands on the host via flatpak-spawn

  --talk-name=org.freedesktop.Flatpak
• session management (logout, suspend)

  --talk-name=org.freedesktop.login1
• access to operating-system files

  --filesystem=host-etc:ro
• Wayland display

  --socket=wayland
• X11 display, only when Wayland is unavailable

  --socket=fallback-x11
• talks to com.system76.CosmicSettingsDaemon

  --talk-name=com.system76.CosmicSettingsDaemon
• screensaver inhibit

  --talk-name=org.freedesktop.ScreenSaver
• talks to org.freedesktop.DisplayManager

  --talk-name=org.freedesktop.DisplayManager
• access to xdg-config/cosmic

  --filesystem=xdg-config/cosmic:rw
• inter-process communication (needed for X11)

  --share=ipc

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

• dev.cappsy.CosmicExtAppletLogoMenu claims the domain cappsy.dev; only its owner can prove that

  publisher:namespace

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.