Sysprof

Permissions

9 permissions weaken the sandbox. Flatsonar asks before installing.

• sandbox escape: can run commands on the host via flatpak-spawn

  --talk-name=org.freedesktop.Flatpak
• unrestricted access to the session D-Bus (all your running apps)

  --socket=session-bus
• unrestricted access to the system D-Bus (system services, hardware)

  --socket=system-bus
• full access to your entire file system

  --filesystem=host
• development features (ptrace, can inspect other processes in its sandbox)

  --allow=devel
• full access to your home folder

  --filesystem=home
• authorisation (polkit)

  --system-talk-name=org.freedesktop.PolicyKit1
• talks to system service org.gnome.Sysprof3

  --system-talk-name=org.gnome.Sysprof3
• talks to system service org.freedesktop.Avahi

  --system-talk-name=org.freedesktop.Avahi
• require-version 1.0.0

  --require-version=1.0.0
• GPU acceleration

  --device=dri
• inter-process communication (needed for X11)

  --share=ipc
• X11 display, only when Wayland is unavailable

  --socket=fallback-x11
• Wayland display

  --socket=wayland
• network

  --share=network
• talks to org.gtk.vfs.*

  --talk-name=org.gtk.vfs.*
• access to xdg-run/gvfsd

  --filesystem=xdg-run/gvfsd
• access to /var/lib/flatpak

  --filesystem=/var/lib/flatpak:ro
• access to ~/.local/share/flatpak

  --filesystem=~/.local/share/flatpak:ro

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

• packaged by github.com/deepin-community, not by the org.gnome namespace owner; it does build the owner's code from https://gitlab.gnome.org/GNOME/sysprof.git

  publisher:namespace
• git source tracks a moving branch: what gets built can change without the manifest changing (x3)

  source:unpinned

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.