Pantheon Tweaks

Permissions

5 permissions weaken the sandbox. Flatsonar asks before installing.

• sandbox escape: can run commands on the host via flatpak-spawn

  --talk-name=org.freedesktop.Flatpak
• X11 display: X11 lets apps read input and windows of other apps

  --socket=x11
• read-only access to your entire file system

  --filesystem=host:ro
• dconf: all GNOME settings

  --talk-name=ca.desrt.dconf
• talks to system service org.freedesktop.Accounts

  --system-talk-name=org.freedesktop.Accounts
• inter-process communication (needed for X11)

  --share=ipc
• Wayland display

  --socket=wayland
• X11 display, only when Wayland is unavailable

  --socket=fallback-x11
• GPU acceleration

  --device=dri
• access to ~/.local/share/sounds

  --filesystem=~/.local/share/sounds:create
• access to xdg-run/dconf

  --filesystem=xdg-run/dconf
• access to ~/.icons

  --filesystem=~/.icons:create
• access to ~/.config/gtk-3.0

  --filesystem=~/.config/gtk-3.0:create
• access to ~/.local/share/themes

  --filesystem=~/.local/share/themes:create

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

• verified on Flathub: the developer proved they control this app id

  publisher:flathub

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.