Comments (4)
It'd be nice if there was a way to allow discord to only access /tmp/discord.sock, while leaving the rest of /tmp hidden. Right now, discord.profile ignores the private-tmp command, exposing the host's /tmp folder.
Actually, I just found that removing ignore private-tmp
seems to let discord
work just fine. I'll tenatively comment out that line and mark this as solved, but let me know if it breaks on your end (it seems to work just fine on mine).
from firejail-profiles.
Also, the whitelist
lines mean that it only has access to /tmp/.X11-unix
and /tmp/user/1000
. Not the best, but not exactly the worst either. As you said, it's not really possible right now to deal with this since discord
doesn't support passing an existing socket (otherwise, writing a wrapper script would be easy).
from firejail-profiles.
Ooh! One way around this is to do the following:
- Make a directory
/tmp/user/1000/discord1000
- Pass
TMPDIR=/tmp/user/1000/discord1000
as an environment variable. - Make sure that directory is whitelisted in your
firejail
profile. - Now it should be able to do this without needing access to anything else!
Off to try this now.
from firejail-profiles.
That's a perfect solution. Thanks!
from firejail-profiles.
Related Issues (20)
- request: profile for youtube-dl HOT 2
- More profiles HOT 8
- cool profiles HOT 7
- torbrowser-launcher used in conjunction with firejail and apparmor
- TeamViewer profile HOT 2
- signal does not start HOT 2
- Steam does not show HOT 1
- Libreoffice can not open documents on removable media HOT 2
- [Request] Profile for gradio HOT 2
- Keepassxc does not start in firejail mode
- Can you explain how to sandbox process with systemd? HOT 4
- Adapting firefox.common to other programs HOT 3
- Breakage introduced by modifications to common.inc
- Tvheadend profile
- biscuit profile HOT 2
- tmate
- Better Documentation
- add Asbru Connection Manager profile
- New Profile for LyX
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from firejail-profiles.