Flatsonar

Déjà Dup Backup Tool

by agrover

Keep your important documents safe from disaster

Dangerous permissions Unverified publisher GPL-3.0+ v45.2
Screenshot 1 of Déjà Dup Backup Tool Screenshot 2 of Déjà Dup Backup Tool

About

Déjà Dup is a simple backup tool. It hides the complexity of backing up the Right Way (encrypted, off-site, and regular) and uses duplicity as the backend. - Support for local, remote, or cloud backup locations such as Google Drive and Nextcloud - Securely encrypts and compresses your data - Incrementally backs up, letting you restore from any particular backup - Schedules regular backups - Integrates well into your GNOME desktop

Permissions

5 permissions weaken the sandbox. Flatsonar asks before installing.

  • full access to your entire file system
    --filesystem=host
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • network configuration
    --system-talk-name=org.freedesktop.NetworkManager
  • your keyring / saved passwords
    --talk-name=org.freedesktop.secrets
  • dconf: all GNOME settings
    --talk-name=ca.desrt.dconf
  • Wayland display
    --socket=wayland
  • inter-process communication (needed for X11)
    --share=ipc
  • network
    --share=network
  • talks to org.gtk.vfs
    --talk-name=org.gtk.vfs
  • talks to org.gtk.vfs.*
    --talk-name=org.gtk.vfs.*
  • talks to org.gnome.OnlineAccounts
    --talk-name=org.gnome.OnlineAccounts
  • access to xdg-run/dconf
    --filesystem=xdg-run/dconf
  • access to ~/.config/dconf
    --filesystem=~/.config/dconf:ro
  • sets environment variable DCONF_USER_CONFIG_DIR
    --env=DCONF_USER_CONFIG_DIR=.config/dconf

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • https://github.com/hupf/deja-dup also publishes this app id
    publisher:collision
  • packaged by github.com/agrover, not by the org.gnome namespace owner; it does build the owner's code from https://gitlab.gnome.org/GNOME/libpeas.git
    publisher:namespace
  • git source tracks a moving branch: what gets built can change without the manifest changing
    source:unpinned

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.