github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6

keepass*: note that private-dev blocks access to new hardware keys

Browse source 
Which may be surprising to some users (see #4883).

Fixes #4883.
This commit is contained in:
Kelvin M. Klann 2022-02-05 21:43:17 -03:00
parent 09ac1a73e8
commit 8a718ff4a7
3 changed files with 9 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
etc/profile-a-l/keepass.profile
View file

@ -38,6 +38,9 @@ seccomp
shell none
private-cache
# Note: private-dev prevents the program from seeing new devices (such as
# hardware keys) on /dev after it has already started; add "ignore nou2f" to
# keepassxc.local if this is an issue (see #4883).
private-dev
private-tmp

3
etc/profile-a-l/keepassx.profile
View file

@ -39,6 +39,9 @@ shell none
tracelog
private-bin keepassx,keepassx2
# Note: private-dev prevents the program from seeing new devices (such as
# hardware keys) on /dev after it has already started; add "ignore nou2f" to
# keepassxc.local if this is an issue (see #4883).
private-dev
private-etc alternatives,fonts,ld.so.cache,ld.so.preload,machine-id
private-tmp

3
etc/profile-a-l/keepassxc.profile
View file

@ -86,6 +86,9 @@ shell none
tracelog
private-bin keepassxc,keepassxc-cli,keepassxc-proxy
# Note: private-dev prevents the program from seeing new devices (such as
# hardware keys) on /dev after it has already started; add "ignore nou2f" to
# keepassxc.local if this is an issue (see #4883).
private-dev
private-etc alternatives,fonts,ld.so.cache,ld.so.preload,machine-id
private-tmp