WineSteam

Permissions

6 permissions weaken the sandbox. Flatsonar asks before installing.

• unrestricted access to the session D-Bus (all your running apps)

  --socket=session-bus
• unrestricted access to the system D-Bus (system services, hardware)

  --socket=system-bus
• all devices (/dev): webcams, disks, raw hardware

  --device=all
• sandbox escape: can run commands on the host via flatpak-spawn

  --talk-name=org.freedesktop.Flatpak
• X11 display: X11 lets apps read input and windows of other apps

  --socket=x11
• development features (ptrace, can inspect other processes in its sandbox)

  --allow=devel
• inter-process communication (needed for X11)

  --share=ipc
• network

  --share=network
• Wayland display

  --socket=wayland
• audio

  --socket=pulseaudio
• multi-architecture binaries

  --allow=multiarch
• notifications

  --talk-name=org.freedesktop.Notifications
• system tray

  --talk-name=org.kde.StatusNotifierWatcher
• access to xdg-run/gamescope-0

  --filesystem=xdg-run/gamescope-0:ro
• access to ~/.config/MangoHud

  --filesystem=~/.config/MangoHud:ro
• system tray

  --talk-name=org.kde.StatusNotifierWatcher
• sets environment variable APPIMAGE_EXTRACT_AND_RUN

  --env=APPIMAGE_EXTRACT_AND_RUN=1
• sets environment variable WEBKIT_DISABLE_DMABUF_RENDERER

  --env=WEBKIT_DISABLE_DMABUF_RENDERER=1

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

• installs a prebuilt binary instead of building from source

  source:prebuilt
• hosted by github.com/gleammerray, which owns the io.github namespace of io.github.gleammerray.WineSteam

  publisher:namespace

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.