general:linux:firejail
This is an old revision of the document!
Firejail
Firefox modifications
~/.config/firejail/firefox-common.local
# private-tmp does not work with kerberos (at least not when CCACHE it is stored in /tmp)
#ignore private-tmp
# To keep screen on when playing videos
#ignore nodbus
# private-tmp does not work with kerberos (at least not when CCACHE it is stored in /tmp)
ignore private-tmp
# Uncomment or put in your firefox.local to enable native notifications.
dbus-user.talk org.freedesktop.Notifications
# Uncomment or put in your firefox.local to allow to inhibit screensavers
dbus-user.talk org.freedesktop.ScreenSaver
# Uncomment or put in your firefox.local for plasma browser integration
dbus-user.own org.mpris.MediaPlayer2.plasma-browser-integration
dbus-user.talk org.kde.JobViewServer
dbus-user.talk org.kde.kuiserver
# To allow nss mymachines to query nspawn machine names
# Probably should be replaced by some other more specific rule though.
ignore dbus-system none
# Allow ICAClient to access its config etc.
whitelist ${HOME}/.ICAClient
general/linux/firejail.1630151467.txt.gz · Last modified: 2021/08/28 11:51 by sunkan