Flatsonar

nuvola-flatpaks

by tiliado

Nuvola flatpak packaging.

Dangerous permissions Unverified publisher BSD-2-Clause
Install Source code

About

Nuvola flatpak packaging.

Permissions

4 permissions weaken the sandbox. Flatsonar asks before installing.

  • wildcard own-name eu.tiliado.*: can impersonate system services
    --own-name=eu.tiliado.*
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • dconf: all GNOME settings
    --talk-name=ca.desrt.dconf
  • network configuration
    --system-talk-name=org.freedesktop.NetworkManager
  • inter-process communication (needed for X11)
    --share=ipc
  • Wayland display
    --socket=wayland
  • GPU acceleration
    --device=dri
  • network
    --share=network
  • audio
    --socket=pulseaudio
  • sets environment variable ALSA_CONFIG_PATH
    --env=ALSA_CONFIG_PATH=
  • access to xdg-run/dconf
    --filesystem=xdg-run/dconf
  • access to ~/.config/dconf
    --filesystem=~/.config/dconf:ro
  • sets environment variable DCONF_USER_CONFIG_DIR
    --env=DCONF_USER_CONFIG_DIR=.config/dconf
  • access to /sys/module/nvidia
    --filesystem=/sys/module/nvidia:ro
  • access to /sys/module/i915
    --filesystem=/sys/module/i915:ro
  • access to /sys/fs/cgroup/pids/system.slice
    --filesystem=/sys/fs/cgroup/pids/system.slice:ro
  • sets environment variable LIBVA_DRIVERS_PATH
    --env=LIBVA_DRIVERS_PATH=/app/lib/dri:/usr/lib/dri
  • sets environment variable VDPAU_DRIVER_PATH
    --env=VDPAU_DRIVER_PATH=/app/lib/vdpau
  • sets environment variable SHELL
    --env=SHELL=/usr/bin/bash
  • session inhibit
    --talk-name=org.gnome.SessionManager
  • talks to org.xfce.SessionManager
    --talk-name=org.xfce.SessionManager
  • registers as a media player (MPRIS)
    --own-name=org.mpris.MediaPlayer2.*
  • talks to com.canonical.Unity
    --talk-name=com.canonical.Unity
  • notifications
    --talk-name=org.freedesktop.Notifications
  • system tray
    --talk-name=org.kde.StatusNotifierWatcher
  • talks to org.gnome.SettingsDaemon.MediaKeys
    --talk-name=org.gnome.SettingsDaemon.MediaKeys
  • talks to org.gnome.SettingsDaemon
    --talk-name=org.gnome.SettingsDaemon
  • keeps its whole sandbox home between runs
    --persist=
  • access to ~/.local/share/icons/hicolor
    --filesystem=~/.local/share/icons/hicolor
  • sets environment variable PKG_CONFIG_PATH
    --env=PKG_CONFIG_PATH=/app/lib/pkgconfig:/usr/lib/pkgconfig

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • eu.tiliado.NuvolaAdk claims the domain tiliado.eu; only its owner can prove that
    publisher:namespace
  • git source tracks a moving branch: what gets built can change without the manifest changing (x4)
    source:unpinned

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.