Differences

This shows you the differences between two versions of the page.

--- general:linux:firejail [2022/11/25 09:10] – sunkan
+++ general:linux:firejail [2023/06/08 20:35] (current) – sunkan
@@ Line 34: / Line 34: @@
 ===== Spotify =====
-~/.config/firejail/spotify.local
+# Workaround after spotify-client 1:1.1.84.716.gc5f8b819-2 that installs files that are not owned by root
-<code>
-# Workaround after spotify-client 1:1.1.84.716.gc5f8b819-2 that installs symlink for /usr/bin/spotify
-#private-bin bash,cat,dirname,find,grep,head,rm,sh,spotify,tclsh,touch,zenity
+<code>
-private-bin bash,cat,dirname,find,grep,head,rm,sh,tclsh,touch,zenity
+chown root:root -R /usr/share/spotify
-ignore private-bin
 </code>
-Also need to change firetools to launch /usr/share/spotify/spotify instead of /usr/bin/spotify which is now just a symlink
+===== Firefox in /usr/local/firefox =====
+Apparmor will stop firejail from executing firefox from /usr/local/firefox
+Fix by creating file /etc/apparmor.d/local/firejail-default
+<code>
+# Allow running firefox from /usr/local/firefox
+#/{,run/firejail/mnt/oroot/}{,usr/,usr/local/}firefox/** ix,
+/usr/local/firefox/** ix,
+</code>