Ignition

Permissions

4 permissions weaken the sandbox. Flatsonar asks before installing.

• access to a sensitive location (xdg-config/autostart): credentials or autostart

  --filesystem=xdg-config/autostart:create
• X11 display: X11 lets apps read input and windows of other apps

  --socket=x11
• access to operating-system files

  --filesystem=host-etc:ro
• access to operating-system files

  --filesystem=host-os:ro
• inter-process communication (needed for X11)

  --share=ipc
• Wayland display

  --socket=wayland
• X11 display, only when Wayland is unavailable

  --socket=fallback-x11
• GPU acceleration

  --device=dri
• access to /var/lib/snapd

  --filesystem=/var/lib/snapd:ro
• access to /snap

  --filesystem=/snap:ro
• access to /var/lib/flatpak

  --filesystem=/var/lib/flatpak:ro
• access to xdg-data/flatpak

  --filesystem=xdg-data/flatpak:ro
• access to ~/.nix-profile/share

  --filesystem=~/.nix-profile/share:ro
• access to xdg-data/icons

  --filesystem=xdg-data/icons:ro
• access to xdg-data/applications

  --filesystem=xdg-data/applications:ro
• access to /nix/store

  --filesystem=/nix/store:ro
• access to /run/current-system/sw

  --filesystem=/run/current-system/sw:ro

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

• verified on Flathub: the developer proved they control this app id

  publisher:flathub

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.