Flatsonar

unofficial-firefox-developer-edition-flatpak-fork

by bob-xxx

Unofficial Firefox Developer Edition flatpak built from Mozilla tarball (x86_64 and aarch64) fork

Dangerous permissions Suspicious publisher GPL-3.0-or-later
Install Source code

About

Unofficial Firefox Developer Edition flatpak built from Mozilla tarball (x86_64 and aarch64) fork

Permissions

4 permissions weaken the sandbox. Flatsonar asks before installing.

  • all devices (/dev): webcams, disks, raw hardware
    --device=all
  • development features (ptrace, can inspect other processes in its sandbox)
    --allow=devel
  • smart card readers
    --socket=pcsc
  • network configuration
    --system-talk-name=org.freedesktop.NetworkManager
  • sets environment variable DICPATH
    --env=DICPATH=/usr/share/hunspell
  • sets environment variable MOZ_APP_REMOTINGNAME
    --env=MOZ_APP_REMOTINGNAME=org.mozilla.FirefoxDev
  • inter-process communication (needed for X11)
    --share=ipc
  • network
    --share=network
  • printing
    --socket=cups
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • audio
    --socket=pulseaudio
  • Wayland display
    --socket=wayland
  • require-version 0.11.1
    --require-version=0.11.1
  • access to xdg-config/gtk-3.0
    --filesystem=xdg-config/gtk-3.0:ro
  • access to your download folder
    --filesystem=xdg-download
  • access to /run/.heim_org.h5l.kcm-socket
    --filesystem=/run/.heim_org.h5l.kcm-socket
  • access to xdg-run/speech-dispatcher
    --filesystem=xdg-run/speech-dispatcher:ro
  • keeps .mozilla between runs
    --persist=.mozilla
  • talks to org.freedesktop.FileManager1
    --talk-name=org.freedesktop.FileManager1
  • accessibility
    --talk-name=org.a11y.Bus
  • talks to org.gtk.vfs.*
    --talk-name=org.gtk.vfs.*
  • owns bus name org.mozilla.firefox.*
    --own-name=org.mozilla.firefox.*
  • registers as a media player (MPRIS)
    --own-name=org.mpris.MediaPlayer2.firefox.*
  • owns bus name org.mozilla.firefox_aurora.*
    --own-name=org.mozilla.firefox_aurora.*

Who publishes this

Something concrete is wrong: the id claims a namespace this repository does not own, or the build does things a build should not. Flatsonar warns twice.

  • org.mozilla.FirefoxDev claims the org.mozilla namespace but is hosted by gitlab.com/bob-xxx and does not build the owner's code
    publisher:namespace

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.