Flatsonar

cosmic-flatpak

by pop-os

COSMIC Flatpak Repository

Dangerous permissions Unverified publisher GPL-3.0
Install Source code

About

COSMIC Flatpak Repository

Permissions

2 permissions weaken the sandbox. Flatsonar asks before installing.

  • sandbox escape: can run commands on the host via flatpak-spawn
    --talk-name=org.freedesktop.Flatpak
  • access to operating-system files
    --filesystem=host-os:ro
  • inter-process communication (needed for X11)
    --share=ipc
  • Wayland display
    --socket=wayland
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • GPU acceleration
    --device=dri
  • talks to com.system76.CosmicSettingsDaemon
    --talk-name=com.system76.CosmicSettingsDaemon
  • talks to com.system76.CosmicSettingsDaemon.Config
    --talk-name=com.system76.CosmicSettingsDaemon.Config
  • talks to com.system76.CosmicSettingsDaemon.Config.*
    --talk-name=com.system76.CosmicSettingsDaemon.Config.*
  • access to xdg-config/cosmic
    --filesystem=xdg-config/cosmic:rw
  • access to /opt
    --filesystem=/opt:ro
  • access to /var/lib/snapd/desktop
    --filesystem=/var/lib/snapd/desktop:ro
  • access to /var/lib/snapd/snap
    --filesystem=/var/lib/snapd/snap:ro
  • access to /var/lib/flatpak/exports/share/applications
    --filesystem=/var/lib/flatpak/exports/share/applications:ro
  • access to /var/lib/flatpak/exports/share/icons
    --filesystem=/var/lib/flatpak/exports/share/icons:ro
  • access to /var/lib/flatpak/app
    --filesystem=/var/lib/flatpak/app:ro
  • access to ~/.local/share/flatpak/exports/share/applications
    --filesystem=~/.local/share/flatpak/exports/share/applications:ro
  • access to ~/.local/share/flatpak/exports/share/icons
    --filesystem=~/.local/share/flatpak/exports/share/icons:ro
  • access to ~/.local/share/flatpak/app
    --filesystem=~/.local/share/flatpak/app:ro
  • access to ~/.local/share/applications
    --filesystem=~/.local/share/applications:ro
  • access to ~/.local/share/icons
    --filesystem=~/.local/share/icons:ro
  • access to ~/.icons
    --filesystem=~/.icons:ro

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • packaged by github.com/pop-os, not by the io.github namespace owner; it does build the owner's code from https://github.com/crocodile/cosmic-ext-applet-workspace-icons.git
    publisher:namespace

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.