Flatsonar

AutoFirma

by ismailof

Aplicación de firma electrónica del Gobierno de España

Dangerous permissions Unverified publisher EUPL-1.1 AND GPL-2.0-or-later v1.9
Install Source code

About

**This is a community package of AutoFirma and not officially supported by Gobierno de España.** Autofirma proporciona una interfaz gráfica para la firma electrónica de documentos y puede ser ejecutada desde el navegador para la firma de procedimientos administrativos web de Administración Electrónica

Permissions

5 permissions weaken the sandbox. Flatsonar asks before installing.

  • full access to your entire file system
    --filesystem=host
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • smart card readers
    --socket=pcsc
  • sets PATH: changes which libraries or plugins get loaded
    --env=PATH=/usr/bin:/app/bin:/app/jre/bin
  • your keyring / saved passwords
    --talk-name=org.freedesktop.secrets
  • access to ~/.var/app/org.mozilla.firefox/.mozilla/firefox
    --filesystem=~/.var/app/org.mozilla.firefox/.mozilla/firefox:rw
  • Wayland display
    --socket=wayland
  • network
    --share=network

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • https://gitlab.com/Marzal/autofirma-flatpak also publishes this app id
    publisher:collision
  • es.gob.autofirma claims the domain gob.es; only its owner can prove that
    publisher:namespace
  • same name as es.gob.afirma on Flathub but from a different repository
    publisher:lookalike

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.