Omikuji
by reakjra
Qt/QML based game launcher for Linux
Dangerous permissions
Suspicious publisher
GPL-3.0-or-later
v0.17.0
About
A Qt/QML based games/apps launcher for Linux. Built 'cause I couldn't bear having 3 different launchers for just games.
Permissions
5 permissions weaken the sandbox. Flatsonar asks before installing.
- all devices (/dev): webcams, disks, raw hardware
--device=all - X11 display: X11 lets apps read input and windows of other apps
--socket=x11 - development features (ptrace, can inspect other processes in its sandbox)
--allow=devel - talks to system service org.freedesktop.UDisks2
--system-talk-name=org.freedesktop.UDisks2 - full access to your home folder
--filesystem=home - network
--share=network - inter-process communication (needed for X11)
--share=ipc - Wayland display
--socket=wayland - audio
--socket=pulseaudio - multi-architecture binaries
--allow=multiarch - per-app shared memory
--allow=per-app-dev-shm - system tray
--talk-name=org.kde.StatusNotifierWatcher - sets environment variable GST_PLUGIN_SYSTEM_PATH
--env=GST_PLUGIN_SYSTEM_PATH=/app/lib/gstreamer-1.0:/app/lib32/gstreamer-1.0:/usr/lib/extensions/gstreamer-1.0:/usr/lib/x86_64-linux-gnu/codecs-extra/lib/gstreamer-1.0:/usr/lib/i386-linux-gnu/codecs-extra/lib/gstreamer-1.0:/usr/lib/x86_64-linux-gnu/gstreamer-1.0:/usr/lib/i386-linux-gnu/gstreamer-1.0 - access to /media
--filesystem=/media - access to /mnt
--filesystem=/mnt - access to /run/media
--filesystem=/run/media - access to ~/.var/app/com.valvesoftware.Steam
--filesystem=~/.var/app/com.valvesoftware.Steam
Who publishes this
Something concrete is wrong: the id claims a namespace this repository does not own, or the build does things a build should not. Flatsonar warns twice.
- io.github.reakjra.omikuji claims the io.github.reakjra namespace but is hosted by github.com/omikuji-launcher and does not build the owner's code
publisher:namespace