Flatsonar

GNOME Settings

by The GNOME Project

Utility to configure the GNOME desktop

Dangerous permissions Unverified publisher GPL-2.0+
Install Source code

Support the creators

Flatsonar is just the shop window. The people below made GNOME Settings.

Donate

About

Settings is the primary interface for configuring your system.

Permissions

6 permissions weaken the sandbox. Flatsonar asks before installing.

  • full access to your entire file system
    --filesystem=host
  • unrestricted access to the session D-Bus (all your running apps)
    --socket=session-bus
  • unrestricted access to the system D-Bus (system services, hardware)
    --socket=system-bus
  • owns desktop name org.gnome.ControlCenter: can impersonate a desktop component
    --own-name=org.gnome.ControlCenter
  • owns desktop name org.gnome.SessionManager: can impersonate a desktop component
    --own-name=org.gnome.SessionManager
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • GPU acceleration
    --device=dri
  • sets environment variable DCONF_USER_CONFIG_DIR
    --env=DCONF_USER_CONFIG_DIR=.config/dconf
  • inter-process communication (needed for X11)
    --share=ipc
  • network
    --share=network
  • audio
    --socket=pulseaudio
  • Wayland display
    --socket=wayland

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • https://github.com/endlessm/gnome-control-center also publishes this app id
    publisher:collision
  • https://github.com/gooroom/gnome-control-center also publishes this app id
    publisher:collision
  • https://github.com/radxa-pkg/gnome-control-center also publishes this app id
    publisher:collision
  • https://github.com/ryzendew/gnome-control-center also publishes this app id
    publisher:collision
  • packaged by github.com/slattann, not by the org.gnome namespace owner; it does build the owner's code from https://gitlab.gnome.org/GNOME/gnome-control-center.git
    publisher:namespace
  • git source tracks a moving branch: what gets built can change without the manifest changing (x33)
    source:unpinned
  • fetches from anongit.freedesktop.org over unencrypted git: anyone on the path can swap the bytes (x13)
    source:insecure-url

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.