SerproID
Serpro专有
Serpro cloud certificate driver for Tessera
Tessera 的扩展 →属于 ICP-Brasil digital signature 合集（10 个应用） →关于
SerproID makes Serpro's cloud certificate available as a token. Tessera loads it like any other driver, so browsers, PDF readers and document signers that use Tessera's tokens can sign with it; each signature is approved in the SerproID phone app.
It also adds the SerproID app to Tessera's window, to sign in and download the certificate.
This extension installs Serpro's official Linux package, downloaded at install time and checked against a pinned checksum. Only its files are taken: no install script runs, and the app's launcher is pointed at its copy inside the extension. SerproID is closed source and not made or endorsed by Tessera's author.
The driver runs inside Tessera's sandbox with Tessera's permissions and has none of its own. After installing it, use Restart Tessera in Tessera's menu.
详情
权限
39 项需确认在 Tessera 内运行，拥有它的全部权限：
X11 窗口系统
传统显示协议；可窥探其他 X11 窗口的输入
网络访问
可访问互联网和本地网络
文件：xdg-run/tessera:create
文件：xdg-config/pkcs11:create
文件：~/.var/app/org.gnome.Papers/config
文件：~/.var/app/org.kde.okular/config
文件：~/.var/app/org.mozilla.firefox/config/mozilla/firefox
文件：~/.var/app/org.mozilla.firefox/.mozilla/firefox
文件：~/.pki/nssdb
文件：~/.var/app/org.chromium.Chromium/data/pki/nssdb
文件：~/.var/app/com.brave.Browser/.pki/nssdb
文件：~/.var/app/com.brave.Browser/data/pki/nssdb
文件：~/.var/app/com.google.Chrome/.pki/nssdb
文件：~/.var/app/com.google.Chrome/data/pki/nssdb
文件：~/.var/app/com.microsoft.Edge/.pki/nssdb
文件：~/.var/app/com.microsoft.Edge/data/pki/nssdb
文件：~/.var/app/org.mozilla.thunderbird/.thunderbird
文件：~/.var/app/org.mozilla.thunderbird/config/thunderbird
文件：~/.var/app/org.mozilla.thunderbird_esr/.thunderbird
文件：~/.var/app/org.mozilla.thunderbird_esr/config/thunderbird
文件：~/.var/app/org.mozilla.Thunderbird/.thunderbird
文件：~/.var/app/org.gnome.Evolution/data/pki/nssdb
文件：~/.var/app/org.libreoffice.LibreOffice/config/libreoffice
文件：~/.var/app/org.libreoffice.LibreOffice/data
文件：~/.var/app/io.github.intoolswetrust.JSignPdf/config
文件：~/.var/app/net.code_industry.MasterPDFEditor/config
文件：~/.mozilla/firefox
文件：xdg-config/mozilla/firefox
文件：xdg-data/pki/nssdb
文件：~/.pjeoffice-pro
文件：~/.thunderbird
文件：xdg-config/thunderbird
文件：xdg-config/libreoffice
文件：xdg-data/flatpak/appstream:ro
文件：/var/lib/flatpak/appstream:ro
文件：xdg-data/flatpak/app:ro
文件：/var/lib/flatpak/app:ro
文件：xdg-data/flatpak/overrides:ro
文件：xdg-run/p11-kit/pkcs11
进程间通信
与主机共享 IPC 命名空间
Socket：pcsc
与 org.kde.StatusNotifierWatcher 通信
持久化存储：.config/serproid
Wayland 显示
GPU 加速
打包方式
有改动修改了厂商的文件
SerproID 应用的启动脚本和配置写死了安装目录（/usr/share/serproid-desktop），改为指向扩展内的副本。软件包的 /etc 目录和安装脚本不使用。
向应用注入了代码
提供驱动的进程会预加载 libgcc_s.so.1（driver.toml 中的 LD_PRELOAD），即运行时自带的副本：厂商的库需要它的栈展开功能，却没有链接它。软件包没有加入自己的代码。