Flatsonar

Krita

by Krita Foundation

Digital Painting, Creative Freedom

Dangerous permissions Verified creator GPL-3.0-only v5.3.4
Install Source code

Support the creators

Flatsonar is just the shop window. The people below made Krita.

GitHub Sponsors Liberapay Donate Donate Donate
Screenshot 1 of Krita Screenshot 2 of Krita Screenshot 3 of Krita Screenshot 4 of Krita Screenshot 5 of Krita Screenshot 6 of Krita Screenshot 7 of Krita Screenshot 8 of Krita

About

Krita is the full-featured digital art studio. It is perfect for sketching and painting, and presents an end–to–end solution for creating digital painting files from scratch by masters. Krita is a great choice for creating concept art, comics, textures for rendering and matte paintings. Krita supports many colorspaces like RGB and CMYK at 8 and 16 bits integer channels, as well as 16 and 32 bits floating point channels. Have fun painting with the advanced brush engines, amazing filters and many handy features that make Krita enormously productive.

Permissions

3 permissions weaken the sandbox. Flatsonar asks before installing.

  • full access to your entire file system
    --filesystem=host
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • sets PYTHONPATH: changes which libraries or plugins get loaded
    --env=PYTHONPATH=/app/lib/python3/dist-packages
  • inter-process communication (needed for X11)
    --share=ipc
  • network
    --share=network
  • GPU acceleration
    --device=dri
  • audio
    --socket=pulseaudio
  • access to xdg-config/kdeglobals
    --filesystem=xdg-config/kdeglobals:ro
  • sets environment variable TMPDIR
    --env=TMPDIR=/var/tmp

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

  • https://github.com/judgementcole/Unofficial-Krita-Onion-Skin-Overlay also publishes this app id
    publisher:collision
  • https://github.com/pepperpepperpepper/krita-touch also publishes this app id
    publisher:collision
  • https://github.com/andrew-kramer-inno/krita also publishes this app id
    publisher:collision
  • https://github.com/NMaghfurUsman/krita also publishes this app id
    publisher:collision
  • fetches from files.kde.org over unencrypted http: anyone on the path can swap the bytes
    source:insecure-url
  • git source tracks a moving branch: what gets built can change without the manifest changing
    source:unpinned
  • same name as org.kde.krita on Flathub but from a different repository
    publisher:lookalike
  • hosted by github.com/kde, which owns the org.kde namespace of org.kde.krita-stable
    publisher:namespace