Flatsonar

FireDragon

by Garuda Linux

FireDragon is a cross-platform, feature-rich and privacy-focused web browser

Dangerous permissions Verified creator MPL-2.0 vv13.6.0
Screenshot 1 of FireDragon

About

FireDragon is based on Firefox with privacy-focused patches and settings from LibreWolf and adds opinionated default settings to improve the out-of-the-box experience and user-friendliness:

  • Dr460nized & Catpuccin editions to visually integrate with Garuda Linux Dr460nized & Mokka respectivly
  • uBlock Origin & Flagfox Add-Ons installed by default
  • Firefox Sync enabled by default using custom Garuda Linux sync server
  • Lepton skin with custom default configuration

Permissions

4 permissions weaken the sandbox. Flatsonar asks before installing.

  • all devices (/dev): webcams, disks, raw hardware
    --device=all
  • smart card readers
    --socket=pcsc
  • development features (ptrace, can inspect other processes in its sandbox)
    --allow=devel
  • network configuration
    --system-talk-name=org.freedesktop.NetworkManager
  • inter-process communication (needed for X11)
    --share=ipc
  • network
    --share=network
  • printing
    --socket=cups
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • audio
    --socket=pulseaudio
  • Wayland display
    --socket=wayland
  • access to xdg-config/gtk-3.0
    --filesystem=xdg-config/gtk-3.0:ro
  • access to your download folder
    --filesystem=xdg-download
  • access to /run/.heim_org.h5l.kcm-socket
    --filesystem=/run/.heim_org.h5l.kcm-socket
  • access to xdg-run/speech-dispatcher
    --filesystem=xdg-run/speech-dispatcher:ro
  • talks to org.gtk.vfs.*
    --talk-name=org.gtk.vfs.*
  • accessibility
    --talk-name=org.a11y.Bus
  • talks to org.freedesktop.FileManager1
    --talk-name=org.freedesktop.FileManager1
  • registers as a media player (MPRIS)
    --own-name=org.mpris.MediaPlayer2.firefox.*
  • owns bus name org.mozilla.firedragon.*
    --own-name=org.mozilla.firedragon.*

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

  • installs a prebuilt binary instead of building from source (x2)
    source:prebuilt
  • verified on Flathub: the developer proved they control this app id
    publisher:flathub

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.