Flatsonar

flatpaks

by Kirtai

Place to store all my personal flatpak manifests

Dangerous permissions Unverified publisher CC0-1.0

About

Place to store all my personal flatpak manifests

Permissions

3 permissions weaken the sandbox. Flatsonar asks before installing.

  • all devices (/dev): webcams, disks, raw hardware
    --device=all
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • read-only access to your entire file system
    --filesystem=host:ro
  • Wayland display
    --socket=wayland
  • inter-process communication (needed for X11)
    --share=ipc
  • audio
    --socket=pulseaudio
  • network
    --share=network

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • packaged by github.com/kirtai, not by the io.github namespace owner; it does build the owner's code from https://github.com/openc2e/openc2e.git
    publisher:namespace
  • fetches from www.ferzkopp.net over unencrypted http: anyone on the path can swap the bytes
    source:insecure-url
  • git source tracks a moving branch: what gets built can change without the manifest changing
    source:unpinned

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.