Flatsonar

flatterm

by chergert

Example flatpak'd terminal

Dangerous permissions Unverified publisher Apache-2.0

About

Example flatpak'd terminal

Permissions

2 permissions weaken the sandbox. Flatsonar asks before installing.

  • sandbox escape: can run commands on the host via flatpak-spawn
    --talk-name=org.freedesktop.Flatpak
  • development features (ptrace, can inspect other processes in its sandbox)
    --allow=devel
  • require-version 1.0.0
    --require-version=1.0.0
  • inter-process communication (needed for X11)
    --share=ipc
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • Wayland display
    --socket=wayland

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • me.hergert.Flatterm claims the domain hergert.me; only its owner can prove that
    publisher:namespace
  • git source tracks a moving branch: what gets built can change without the manifest changing (x2)
    source:unpinned

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.