User Tools

Site Tools


general:linux:firejail

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
general:linux:firejail [2021/08/28 11:47] – created sunkangeneral:linux:firejail [2023/06/08 20:35] (current) sunkan
Line 28: Line 28:
 # Probably should be replaced by some other more specific rule though. # Probably should be replaced by some other more specific rule though.
 ignore dbus-system none ignore dbus-system none
 +
 +# Allow ICAClient to access its config etc.
 +whitelist ${HOME}/.ICAClient
 </code> </code>
 +
 +===== Spotify =====
 +# Workaround after spotify-client 1:1.1.84.716.gc5f8b819-2 that installs files that are not owned by root
 +
 +<code>
 +chown root:root -R /usr/share/spotify
 +</code>
 +
 +===== Firefox in /usr/local/firefox =====
 +Apparmor will stop firejail from executing firefox from /usr/local/firefox
 +
 +Fix by creating file /etc/apparmor.d/local/firejail-default
 +<code>
 +# Allow running firefox from /usr/local/firefox
 +#/{,run/firejail/mnt/oroot/}{,usr/,usr/local/}firefox/** ix,
 +/usr/local/firefox/** ix,
 +</code>
 +
general/linux/firejail.1630151259.txt.gz · Last modified: 2021/08/28 11:47 by sunkan

Donate Powered by PHP Valid HTML5 Valid CSS Run on Debian Driven by DokuWiki