dbustest
by aplazas
Testing using org.freedesktop.Flatpak.Development HostCommand in Vala.
Dangerous permissions
Verified creator
GPL-3.0-or-later
About
Testing using org.freedesktop.Flatpak.Development HostCommand in Vala.
Permissions
3 permissions weaken the sandbox. Flatsonar asks before installing.
- sandbox escape: can run commands on the host via flatpak-spawn
--talk-name=org.freedesktop.Flatpak - X11 display: X11 lets apps read input and windows of other apps
--socket=x11 - dconf: all GNOME settings
--talk-name=ca.desrt.dconf - network
--share=network - inter-process communication (needed for X11)
--share=ipc - Wayland display
--socket=wayland - access to xdg-run/dconf
--filesystem=xdg-run/dconf - access to ~/.config/dconf
--filesystem=~/.config/dconf:ro - sets environment variable DCONF_USER_CONFIG_DIR
--env=DCONF_USER_CONFIG_DIR=.config/dconf
Who publishes this
The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.
- git source tracks a moving branch: what gets built can change without the manifest changing
source:unpinned - hosted by gitlab.gnome.org/aplazas, which owns the org.gnome namespace of org.gnome.Dbustest
publisher:namespace
Maintenance
Recent activity on the upstream repository, or built and reviewed by Flathub.
No staleness signals: recent activity, or built and reviewed by Flathub.