Estimated reading time: 2 minutes

Flatpak is often presented as the ideal solution for installing software safely and independently of the distribution. And it's true... at least in part. Those who use Flatpak with a minimum of awareness quickly realize that the real issue is not the installation of applications, but permission management. This is where it comes in Flatseal.

Flatseal is a small graphics application designed for a single purpose: show the permissions granted to Flatpak applications in a clear and editable way. No magic, no complex abstractions: just an interface that finally makes readable what is normally hidden behind long commands, sparse documentation and good intentions.

If you've ever installed a Flatpak app that "doesn't see files", “does not access audio”, or “it doesn't work as you expected”, Flatseal is probably the tool you were missing.

Pros and cons

Like all tools that touch delicate parts of the system, Flatseal has very positive sides... and some aspects that need to be used wisely.

• Pro: clear interface, granular permission control, very useful for understanding because a Flatpak app doesn't work as expected, and to adapt it to your workflow.
  
• Counter: can lead to granting too many permissions, defeating part of the Flatpak security model; it is not intended for completely inexperienced users.
  

The real strength of Flatseal is transparency: lists filesystem accesses, devices, buses in Sistema, environment variables and network functionality in a readable way. This makes it a valuable tool not just for “making things work”, but also for understand how they work Flatpak applications under the hood.

At the same time, It is good to remember that Flatseal is not an additional security system: is a switch. Using it badly means turning an isolated app into something very similar to a traditional app, losing some of the benefits of Flatpak.

When to use it (and when in)

Flatseal is extremely convenient if you use complex desktop applications: graphic editors, IDE, audio/video tools, alternative file managers. In these cases, the default permissions are often not enough and the alternative would be to launch unintuitive commands or give up the functionality.

However, it is less suitable if you are not clear what are you authorizing. Granting full access to the home directory or system filesystem “to run an app” is easy, but it is rarely the best choice. Flatseal works well when used with a minimum of care.

Installation and use

Flatseal is distributed as an application Flatpak and is available on Flathub. If you already use Flatpak, installation is immediate:

flatpak install flathub com.github.tchx84.Flatseal
  

Once started, Flatseal shows the list of installed Flatpak applications on the left. By selecting one, the detailed list of granted permissions will appear on the right. Each change is applied immediately and affects only the selected app.

It is not necessary to keep Flatseal open all the time: it is a tool that is used when needed, to configure or correct a behavior, and then you can easily forget it… until the next capricious app.

In conclusion, Flatseal is one of those tools that should be installed by default on every system that uses Flatpak seriously. It is not essential for everyone, but when needed, It does exactly what it says on the tin: give control, without unnecessary complications.