jdProcessFileWatcher
by JakobDev
Effortlessly monitor and display real-time file access for any process
Support the creators
Flatsonar is just the shop window. The people below made jdProcessFileWatcher.
About
With jdProcessFileWatcher, you can monitor all the files accessed by a process. It allows you to start any program and observe in real-time which files it accesses through an easy-to-use GUI. Additionally, you have the option to connect to an already running process.
Permissions
3 permissions weaken the sandbox. Flatsonar asks before installing.
- sandbox escape: can run commands on the host via flatpak-spawn
--talk-name=org.freedesktop.Flatpak - access to operating-system files
--filesystem=host-etc:ro - access to operating-system files
--filesystem=host-os:ro - inter-process communication (needed for X11)
--share=ipc - X11 display, only when Wayland is unavailable
--socket=fallback-x11 - Wayland display
--socket=wayland - GPU acceleration
--device=dri - access to xdg-data/flatpak/app
--filesystem=xdg-data/flatpak/app:ro - access to /var/lib/flatpak/app
--filesystem=/var/lib/flatpak/app:ro - access to /var/lib/flatpak/exports/share/applications
--filesystem=/var/lib/flatpak/exports/share/applications:ro - access to xdg-data/flatpak/exports/share/icons
--filesystem=xdg-data/flatpak/exports/share/icons:ro - access to /var/lib/flatpak/exports/share/icons
--filesystem=/var/lib/flatpak/exports/share/icons:ro - access to xdg-data/applications
--filesystem=xdg-data/applications:ro - access to xdg-data/flatpak/exports/share/applications
--filesystem=xdg-data/flatpak/exports/share/applications:ro - access to xdg-config/kdeglobals
--filesystem=xdg-config/kdeglobals:ro - talks to com.canonical.AppMenu.Registrar
--talk-name=com.canonical.AppMenu.Registrar - talks to org.kde.kconfig.notify
--talk-name=org.kde.kconfig.notify - talks to org.kde.KGlobalSettings
--talk-name=org.kde.KGlobalSettings
Who publishes this
The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.
- verified on Flathub: the developer proved they control this app id
publisher:flathub
Maintenance
Recent activity on the upstream repository, or built and reviewed by Flathub.
No staleness signals: recent activity, or built and reviewed by Flathub.