Flatsonar

Niepce Digital

by hfiguiere

Advanced Photo Editing

Dangerous permissions Unverified publisher GPL-3.0+
Install Source code

About

Niepce Digital is an application used to manage and edit photos. Features: - Photo library management - Non destructive image editing - RAW processing

Permissions

6 permissions weaken the sandbox. Flatsonar asks before installing.

  • sandbox escape: can run commands on the host via flatpak-spawn
    --talk-name=org.freedesktop.Flatpak
  • full access to your entire file system
    --filesystem=host
  • all devices (/dev): webcams, disks, raw hardware
    --device=all
  • development features (ptrace, can inspect other processes in its sandbox)
    --allow=devel
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • dconf: all GNOME settings
    --talk-name=ca.desrt.dconf
  • inter-process communication (needed for X11)
    --share=ipc
  • Wayland display
    --socket=wayland
  • network
    --share=network
  • talks to org.gtk.vfs.*
    --talk-name=org.gtk.vfs.*
  • access to xdg-run/dconf
    --filesystem=xdg-run/dconf
  • access to ~/.config/dconf
    --filesystem=~/.config/dconf:ro
  • sets environment variable DCONF_USER_CONFIG_DIR
    --env=DCONF_USER_CONFIG_DIR=.config/dconf

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • packaged by github.com/hfiguiere, not by the org.gnome namespace owner; it does build the owner's code from https://gitlab.gnome.org/GNOME/niepce.git
    publisher:namespace
  • fetches from www.libraw.org over unencrypted http: anyone on the path can swap the bytes (x5)
    source:insecure-url
  • git source tracks a moving branch: what gets built can change without the manifest changing
    source:unpinned
  • the build has network access: it can download things the manifest does not list
    build-options:--share=network

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.