github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-21 06:45:29 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 1

profiles: bijiben: update webkit var and disable in firecfg (#6418)

Browse source 
The current `bijiben.profile` sets an environment variable to disable
its internal webkit/bubblewrap sandbox but now a different variable
needs to be set[1]:

    WEBKIT_FORCE_SANDBOX no longer allows disabling the sandbox. Use WEBKIT_DISABLE_SANDBOX_THIS_IS_DANGEROUS=1 instead.

This may be needed to make the profile work, but disabling the sandbox
affects the security in webkit[2], so update the variable and disable
bijiben by default in firecfg.config.

Note: Upstream replaced bijiben by gnome-notes[3] [4].

Relates to #2995.

[1] 0678a98c86/Source/WebKit/UIProcess/Launcher/glib/ProcessLauncherGLib.cpp (L117)
[2] https://github.com/netblue30/firejail/issues/2995
[3] https://archlinux.org/packages/extra/x86_64/gnome-notes/
[4] https://wiki.gnome.org/Apps/Notes
This commit is contained in:
glitsj16 2024-07-27 22:36:46 +00:00 • committed by GitHub
parent 6da6817f53
commit 601aa5c6aa
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 5 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
etc/profile-a-l/bijiben.profile
View file

@ -59,5 +59,8 @@ dbus-user.talk ca.desrt.dconf
dbus-user.talk org.freedesktop.Tracker1
dbus-system none
env WEBKIT_FORCE_SANDBOX=0
# Warning: Disabling the webkit sandbox may be needed to make firejail work
# with webkit2gtk, but this is not recommended (see #2995).
# Add the following line to bijiben.local at your own risk:
#env WEBKIT_DISABLE_SANDBOX_THIS_IS_DANGEROUS=1
restrict-namespaces

2
src/firecfg/firecfg.config
View file

@ -97,7 +97,7 @@ basilisk
bcompare
beaker
bibletime
bijiben
#bijiben # webkit2gtk-4.x requires bwrap (see #3647)
bitcoin-qt
bitlbee
bitwarden