Flatsonar

Thorium

by CAB233

The web browser from Alex313031

Dangerous permissions Unverified publisher BSD-3-Clause and LGPL-2.1+ and Apache-2.0 and IJG and MIT and GPL-2.0+ and ISC and OpenSSL and (MPL-1.1 or GPL-2.0 or LGPL-2.0)
Screenshot 1 of Thorium

About

Thorium is an open-source browser project that aims to build a safer, faster, and more stable way to experience the web. We invite you to join our effort to build a powerful platform for developing a new generation of web applications. Thorium supports Vorbis, Theora, WebM, AAC, H.264, H.265, MP3, and HTML5 audio and video standards.

Permissions

7 permissions weaken the sandbox. Flatsonar asks before installing.

  • all devices (/dev): webcams, disks, raw hardware
    --device=all
  • smart card readers
    --socket=pcsc
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • talks to system service org.bluez
    --system-talk-name=org.bluez
  • talks to system service org.freedesktop.Avahi
    --system-talk-name=org.freedesktop.Avahi
  • your keyring / saved passwords
    --talk-name=org.freedesktop.secrets
  • sets GIO_EXTRA_MODULES: changes which libraries or plugins get loaded
    --env=GIO_EXTRA_MODULES=/app/lib/gio/modules
  • require-version 1.8.2
    --require-version=1.8.2
  • inter-process communication (needed for X11)
    --share=ipc
  • network
    --share=network
  • printing
    --socket=cups
  • audio
    --socket=pulseaudio
  • Wayland display
    --socket=wayland
  • battery status
    --system-talk-name=org.freedesktop.UPower
  • talks to org.freedesktop.FileManager1
    --talk-name=org.freedesktop.FileManager1
  • notifications
    --talk-name=org.freedesktop.Notifications
  • screensaver inhibit
    --talk-name=org.freedesktop.ScreenSaver
  • talks to org.kde.kwalletd5
    --talk-name=org.kde.kwalletd5
  • talks to org.kde.kwalletd6
    --talk-name=org.kde.kwalletd6
  • session inhibit
    --talk-name=org.gnome.SessionManager
  • registers as a media player (MPRIS)
    --own-name=org.mpris.MediaPlayer2.chromium.*
  • keeps .pki between runs
    --persist=.pki
  • access to /run/.heim_org.h5l.kcm-socket
    --filesystem=/run/.heim_org.h5l.kcm-socket
  • access to your desktop folder
    --filesystem=xdg-desktop
  • access to your download folder
    --filesystem=xdg-download
  • access to xdg-run/dconf
    --filesystem=xdg-run/dconf
  • access to xdg-run/pipewire-0
    --filesystem=xdg-run/pipewire-0
  • access to ~/.config/dconf
    --filesystem=~/.config/dconf:ro
  • access to ~/.config/kioslaverc
    --filesystem=~/.config/kioslaverc
  • sets environment variable DCONF_USER_CONFIG_DIR
    --env=DCONF_USER_CONFIG_DIR=.config/dconf
  • sets environment variable GSETTINGS_BACKEND
    --env=GSETTINGS_BACKEND=dconf

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • rocks.thorium.Thorium claims the domain thorium.rocks; only its owner can prove that
    publisher:namespace

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.