Flatsonar

Lutris

by Lutris Team

Video game preservation platform

Dangerous permissions Verified creator GPL-3.0-or-later v0.5.22
Install Source code

Support the creators

Flatsonar is just the shop window. The people below made Lutris.

Donate
Screenshot 1 of Lutris

About

Lutris helps you install and play video games from all eras and from most gaming systems. By leveraging and combining existing emulators, engine re-implementations and compatibility layers, it gives you a central interface to launch all your games.

Permissions

6 permissions weaken the sandbox. Flatsonar asks before installing.

  • all devices (/dev): webcams, disks, raw hardware
    --device=all
  • sandbox escape: can run commands on the host via flatpak-spawn
    --talk-name=org.freedesktop.Flatpak
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • full access to your home folder
    --filesystem=home
  • development features (ptrace, can inspect other processes in its sandbox)
    --allow=devel
  • talks to system service org.freedesktop.UDisks2
    --system-talk-name=org.freedesktop.UDisks2
  • network
    --share=network
  • inter-process communication (needed for X11)
    --share=ipc
  • Wayland display
    --socket=wayland
  • audio
    --socket=pulseaudio
  • access to /media
    --filesystem=/media
  • access to /run/media
    --filesystem=/run/media
  • access to ~/.config/MangoHud
    --filesystem=~/.config/MangoHud:ro
  • access to xdg-run/gamescope-0
    --filesystem=xdg-run/gamescope-0:ro
  • access to ~/.var/app/com.valvesoftware.Steam
    --filesystem=~/.var/app/com.valvesoftware.Steam:ro
  • access to xdg-data/umu
    --filesystem=xdg-data/umu:create
  • multi-architecture binaries
    --allow=multiarch
  • per-app shared memory
    --allow=per-app-dev-shm
  • display configuration
    --talk-name=org.gnome.Mutter.DisplayConfig
  • system tray
    --talk-name=org.kde.StatusNotifierWatcher
  • screensaver inhibit
    --talk-name=org.freedesktop.ScreenSaver

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

  • fetches from www.tcpdump.org over unencrypted http: anyone on the path can swap the bytes (x13)
    source:insecure-url
  • installs a prebuilt binary instead of building from source
    source:prebuilt
  • verified on Flathub: the developer proved they control this app id
    publisher:flathub

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.