cosmic-flatpak
by pop-os
COSMIC Flatpak Repository
Dangerous permissions
Unverified publisher
GPL-3.0
About
COSMIC Flatpak Repository
Permissions
1 permission weaken the sandbox. Flatsonar asks before installing.
- sandbox escape: can run commands on the host via flatpak-spawn
--talk-name=org.freedesktop.Flatpak - network
--share=network - Wayland display
--socket=wayland - GPU acceleration
--device=dri - access to xdg-config/cosmic
--filesystem=xdg-config/cosmic:rw - access to /sys/class/hwmon
--filesystem=/sys/class/hwmon:ro - access to /sys/class/drm
--filesystem=/sys/class/drm:ro - access to /sys/class/accel
--filesystem=/sys/class/accel:ro - talks to com.system76.CosmicSettingsDaemon
--talk-name=com.system76.CosmicSettingsDaemon - portal Desktop
--talk-name=org.freedesktop.portal.Desktop - portal Location
--talk-name=org.freedesktop.portal.Location
Who publishes this
Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.
- packaged by github.com/pop-os, not by the io.github namespace owner; it does build the owner's code from https://github.com/cosmic-utils/cosmic-ext-applet-sysinfo.git
publisher:namespace
Maintenance
Recent activity on the upstream repository, or built and reviewed by Flathub.
No staleness signals: recent activity, or built and reviewed by Flathub.