Flatsonar

q4wine

by Oleksii S. Malakhov

Utility for Wine applications and prefixes management

Dangerous permissions Flathub reviewed GPL-3.0-or-later v1.4.1

Support the creators

Flatsonar is just the shop window. The people below made q4wine.

Screenshot 1 of q4wine

About

Q4Wine is a Qt GUI for Wine. It will help you manage Wine prefixes and installed applications.

Permissions

5 permissions weaken the sandbox. Flatsonar asks before installing.

  • all devices (/dev): webcams, disks, raw hardware
    --device=all
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • development features (ptrace, can inspect other processes in its sandbox)
    --allow=devel
  • network configuration
    --system-talk-name=org.freedesktop.NetworkManager
  • talks to system service org.freedesktop.UDisks2
    --system-talk-name=org.freedesktop.UDisks2
  • network
    --share=network
  • inter-process communication (needed for X11)
    --share=ipc
  • Wayland display
    --socket=wayland
  • audio
    --socket=pulseaudio
  • access to your documents folder
    --filesystem=xdg-documents
  • access to your desktop folder
    --filesystem=xdg-desktop
  • access to your music folder
    --filesystem=xdg-music
  • access to xdg-config/kdeglobals
    --filesystem=xdg-config/kdeglobals:ro
  • access to your pictures folder
    --filesystem=xdg-pictures
  • access to your videos folder
    --filesystem=xdg-videos
  • access to your download folder
    --filesystem=xdg-download
  • multi-architecture binaries
    --allow=multiarch
  • talks to com.canonical.AppMenu.Registrar
    --talk-name=com.canonical.AppMenu.Registrar
  • talks to org.kde.kconfig.notify
    --talk-name=org.kde.kconfig.notify
  • talks to org.kde.KGlobalSettings
    --talk-name=org.kde.KGlobalSettings
  • notifications
    --talk-name=org.freedesktop.Notifications

Who publishes this

On Flathub: the manifest was reviewed and built on Flathub's infrastructure, but the developer has not verified ownership of the app id.

  • fetches from savannah.nongnu.org over unencrypted http: anyone on the path can swap the bytes
    source:insecure-url
  • tries to escalate privileges: echo "Running sudo is not possible in flatpak sandbox; command was: $*" > /dev/stderr exit 1
    source:command
  • tries to escalate privileges: install -Dm755 sudo.sh /app/bin/sudo
    q4wine-app-environment:build-commands
  • on Flathub: manifest reviewed and built by Flathub; the developer has not verified the app id
    publisher:flathub

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.