Brave

Permissions

11 permissions weaken the sandbox. Flatsonar asks before installing.

• all devices (/dev): webcams, disks, raw hardware

  --device=all
• smart card readers

  --socket=pcsc
• X11 display: X11 lets apps read input and windows of other apps

  --socket=x11
• talks to system service org.bluez

  --system-talk-name=org.bluez
• talks to system service org.freedesktop.Avahi

  --system-talk-name=org.freedesktop.Avahi
• your keyring / saved passwords

  --talk-name=org.freedesktop.secrets
• access to operating-system files

  --filesystem=host-etc
• access to unrecognised path 'home/.local/share/applications:create'

  --filesystem=home/.local/share/applications:create
• access to unrecognised path 'home/.local/share/icons:create'

  --filesystem=home/.local/share/icons:create
• dconf: all GNOME settings

  --talk-name=ca.desrt.dconf
• sets GIO_EXTRA_MODULES: changes which libraries or plugins get loaded

  --env=GIO_EXTRA_MODULES=/app/lib/gio/modules
• require-version 1.8.2

  --require-version=1.8.2
• inter-process communication (needed for X11)

  --share=ipc
• network

  --share=network
• printing

  --socket=cups
• audio

  --socket=pulseaudio
• Wayland display

  --socket=wayland
• Bluetooth

  --allow=bluetooth
• battery status

  --system-talk-name=org.freedesktop.UPower
• talks to com.canonical.AppMenu.Registrar

  --talk-name=com.canonical.AppMenu.Registrar
• talks to org.freedesktop.FileManager1

  --talk-name=org.freedesktop.FileManager1
• notifications

  --talk-name=org.freedesktop.Notifications
• screensaver inhibit

  --talk-name=org.freedesktop.ScreenSaver
• talks to org.kde.kwalletd5

  --talk-name=org.kde.kwalletd5
• talks to org.kde.kwalletd6

  --talk-name=org.kde.kwalletd6
• session inhibit

  --talk-name=org.gnome.SessionManager
• talks to org.gnome.ScreenSaver

  --talk-name=org.gnome.ScreenSaver
• talks to org.gnome.Mutter.IdleMonitor.*

  --talk-name=org.gnome.Mutter.IdleMonitor.*
• talks to org.cinnamon.ScreenSaver

  --talk-name=org.cinnamon.ScreenSaver
• talks to org.mate.ScreenSaver

  --talk-name=org.mate.ScreenSaver
• talks to org.xfce.ScreenSaver

  --talk-name=org.xfce.ScreenSaver
• registers as a media player (MPRIS)

  --own-name=org.mpris.MediaPlayer2.brave.*
• access to /run/.heim_org.h5l.kcm-socket

  --filesystem=/run/.heim_org.h5l.kcm-socket
• access to xdg-run/pipewire-0

  --filesystem=xdg-run/pipewire-0
• access to your desktop folder

  --filesystem=xdg-desktop
• access to your download folder

  --filesystem=xdg-download
• access to /tmp

  --filesystem=/tmp
• keeps .pki between runs

  --persist=.pki
• access to xdg-run/dconf

  --filesystem=xdg-run/dconf
• access to ~/.config/dconf

  --filesystem=~/.config/dconf:ro
• sets environment variable DCONF_USER_CONFIG_DIR

  --env=DCONF_USER_CONFIG_DIR=.config/dconf
• sets environment variable GSETTINGS_BACKEND

  --env=GSETTINGS_BACKEND=dconf
• sets environment variable CHROME_VERSION_EXTRA

  --env=CHROME_VERSION_EXTRA=stable
• access to ~/.config/kioslaverc

  --filesystem=~/.config/kioslaverc

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

• same name as com.brave.Browser on Flathub but from a different repository

  publisher:lookalike
• hosted by github.com/shyvortex, which owns the io.github namespace of io.github.shyvortex.BraveOrigin

  publisher:namespace

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.