Flatsonar

nuvola-flatpaks

by tiliado

Nuvola flatpak packaging.

Broad permissions Unverified publisher BSD-2-Clause
Install Source code

About

Nuvola flatpak packaging.

Permissions

3 permissions weaken the sandbox. Flatsonar asks before installing.

  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • dconf: all GNOME settings
    --talk-name=ca.desrt.dconf
  • network configuration
    --system-talk-name=org.freedesktop.NetworkManager
  • inter-process communication (needed for X11)
    --share=ipc
  • Wayland display
    --socket=wayland
  • GPU acceleration
    --device=dri
  • network
    --share=network
  • audio
    --socket=pulseaudio
  • sets environment variable ALSA_CONFIG_PATH
    --env=ALSA_CONFIG_PATH=
  • access to xdg-run/dconf
    --filesystem=xdg-run/dconf
  • access to ~/.config/dconf
    --filesystem=~/.config/dconf:ro
  • sets environment variable DCONF_USER_CONFIG_DIR
    --env=DCONF_USER_CONFIG_DIR=.config/dconf
  • access to /sys/module/nvidia
    --filesystem=/sys/module/nvidia:ro
  • access to /sys/module/i915
    --filesystem=/sys/module/i915:ro
  • access to /sys/fs/cgroup/pids/system.slice
    --filesystem=/sys/fs/cgroup/pids/system.slice:ro
  • sets environment variable LIBVA_DRIVERS_PATH
    --env=LIBVA_DRIVERS_PATH=/app/lib/dri:/usr/lib/dri
  • sets environment variable VDPAU_DRIVER_PATH
    --env=VDPAU_DRIVER_PATH=/app/lib/vdpau
  • sets environment variable SHELL
    --env=SHELL=/usr/bin/bash
  • session inhibit
    --talk-name=org.gnome.SessionManager
  • talks to org.xfce.SessionManager
    --talk-name=org.xfce.SessionManager
  • talks to org.gnome.SettingsDaemon.MediaKeys
    --talk-name=org.gnome.SettingsDaemon.MediaKeys
  • talks to org.gnome.SettingsDaemon
    --talk-name=org.gnome.SettingsDaemon
  • talks to eu.tiliado.*
    --talk-name=eu.tiliado.*

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • eu.tiliado.Nuvola claims the domain tiliado.eu; only its owner can prove that
    publisher:namespace

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.