Differences

This shows you the differences between two versions of the page.

--- general:linux:firejail [2021/08/28 11:47] – created sunkan
+++ general:linux:firejail [2023/06/08 20:35] (current) – sunkan
@@ Line 28: / Line 28: @@
 # Probably should be replaced by some other more specific rule though.
 ignore dbus-system none
+# Allow ICAClient to access its config etc.
+whitelist ${HOME}/.ICAClient
 </code>
+===== Spotify =====
+# Workaround after spotify-client 1:1.1.84.716.gc5f8b819-2 that installs files that are not owned by root
+<code>
+chown root:root -R /usr/share/spotify
+</code>
+===== Firefox in /usr/local/firefox =====
+Apparmor will stop firejail from executing firefox from /usr/local/firefox
+Fix by creating file /etc/apparmor.d/local/firejail-default
+<code>
+# Allow running firefox from /usr/local/firefox
+#/{,run/firejail/mnt/oroot/}{,usr/,usr/local/}firefox/** ix,
+/usr/local/firefox/** ix,
+</code>