What can Flatpaks see

Android and iOS apps with their modern robust sandboxes can still see quite a lot about their OS, e.g. [1] and [2]. This makes me wonder that, if a Flatpak has no permissions (or its permissions are removed with flatpak override) except for necessary ones (e.g. Wayland), what can it see about its distro.

I believe they can read the clipboard arbitrarily, but not sure about anything beyond that (assuming a DE that protects screencopy).

1 Like

Pretty sure the app would need access to the wayland socket for that. With no permissions, it can’t.

1 Like

True, but you’ll need to give it access to X11 or Wayland to work I think. Will edit the original post.