Flatsonar

SpacedBazaar

by Spaced Linux

Discover and install apps

Dangerous permissions Verified creator GPL-3.0-or-later v0.1.11
Install Source code

Support the creators

Flatsonar is just the shop window. The people below made SpacedBazaar.

GitHub Sponsors Ko-fi Donate Donate
Screenshot 1 of SpacedBazaar

About

A fast and modern app store for Linux with a focus on discovering and installing Flatpak apps and add-ons, particularly from Flathub. - Queue multiple installs and keep browsing - Easily view app permissions - Sign in to Flathub to view and manage your favorites - Search apps directly from GNOME Shell

Permissions

4 permissions weaken the sandbox. Flatsonar asks before installing.

  • sandbox escape: can run commands on the host via flatpak-spawn
    --talk-name=org.freedesktop.Flatpak
  • talks to system service org.freedesktop.Flatpak.SystemHelper
    --system-talk-name=org.freedesktop.Flatpak.SystemHelper
  • talks to system service org.freedesktop.Accounts
    --system-talk-name=org.freedesktop.Accounts
  • can change portal permissions
    --talk-name=org.freedesktop.impl.portal.PermissionStore
  • network
    --share=network
  • inter-process communication (needed for X11)
    --share=ipc
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • Wayland display
    --socket=wayland
  • GPU acceleration
    --device=dri
  • access to /var/lib/flatpak
    --filesystem=/var/lib/flatpak
  • access to xdg-data/flatpak
    --filesystem=xdg-data/flatpak
  • access to /var/tmp
    --filesystem=/var/tmp
  • access to ~/.var/app
    --filesystem=~/.var/app

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

  • repository is 38 day(s) old with 1 star(s): no track record yet
    publisher:new-repo
  • hosted by github.com/crhy, which owns the io.github namespace of io.github.crhy.SpacedBazaar
    publisher:namespace

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.