diff --git a/etc/inc/disable-common.inc b/etc/inc/disable-common.inc index 32f4cb81f..080a7f3a1 100644 --- a/etc/inc/disable-common.inc +++ b/etc/inc/disable-common.inc @@ -512,6 +512,7 @@ blacklist /usr/lib/policykit-1/polkit-agent-helper-1 blacklist /usr/lib/dbus-1.0/dbus-daemon-launch-helper blacklist /usr/lib/eject/dmcrypt-get-device blacklist /usr/lib/chromium/chrome-sandbox +blacklist /usr/lib/opera/opera_sandbox blacklist /usr/lib/vmware blacklist ${PATH}/suexec blacklist /usr/lib/squid/basic_pam_auth diff --git a/etc/profile-m-z/opera.profile b/etc/profile-m-z/opera.profile index b342b3961..e52e9294d 100644 --- a/etc/profile-m-z/opera.profile +++ b/etc/profile-m-z/opera.profile @@ -17,5 +17,16 @@ whitelist ${HOME}/.cache/opera whitelist ${HOME}/.config/opera whitelist ${HOME}/.opera +# https://github.com/netblue30/firejail/issues/4965 +ignore whitelist /usr/share/mozilla/extensions +ignore whitelist /usr/share/webext + +# opera uses opera_sandbox instead of chrome-sandbox +noblacklist /usr/lib/opera/opera_sandbox +ignore noblacklist /usr/lib/chromium/chrome-sandbox + +# Add the below to your opera.local if you want to disable auto update +#env OPERA_AUTOUPDATE_DISABLED=1 + # Redirect include chromium-common.profile