github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #1646] Add p11-kit support #1108

New issue

Closed

opened 2026-05-05 07:28:02 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 07:28:02 -06:00

Owner

Originally created by @lhernanz on GitHub (Nov 14, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1646

Hi,

I would love to have p11-kit support added in the whitelist-common file. I would propose the following:

whitelist ~/.config/pkcs11
read-only ~/.config/pkcs11

From their web https://p11-glue.freedesktop.org/:

This is an effort to use and promote PKCS#11 as glue between crypto libraries and security applications on the open source desktop.

As a security related project, I think it would be of interest for firejail users for it to be supported. The above directory is where the user configuration is stored. All the applications using the p11 library (browsers, ssh, etc.) need to access to those files. This is the reason I am proposing those lines to go to the common file. The configurations file there are not very sensitive, so having global access should not be a huge problem.

Thanks
Regards

Originally created by @lhernanz on GitHub (Nov 14, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1646 Hi, I would love to have p11-kit support added in the whitelist-common file. I would propose the following: ``` whitelist ~/.config/pkcs11 read-only ~/.config/pkcs11 ``` From their web [https://p11-glue.freedesktop.org/](https://p11-glue.freedesktop.org/): > This is an effort to use and promote PKCS#11 as glue between crypto libraries and security applications on the open source desktop. As a security related project, I think it would be of interest for firejail users for it to be supported. The above directory is where the user configuration is stored. All the applications using the p11 library (browsers, ssh, etc.) need to access to those files. This is the reason I am proposing those lines to go to the common file. The configurations file there are not very sensitive, so having global access should not be a huge problem. Thanks Regards

gitea-mirror

2026-05-05 07:28:02 -06:00

closed this issue
added the
enhancement
label

gitea-mirror commented

2026-05-05 07:28:06 -06:00

Author

Owner

@netblue30 commented on GitHub (Nov 18, 2017):

Will do!

@netblue30 commented on GitHub (Nov 18, 2017): Will do!

gitea-mirror commented

2026-05-05 07:28:06 -06:00

Author

Owner

@smitsohu commented on GitHub (Nov 24, 2017):

@lhernanz Thanks.

@smitsohu commented on GitHub (Nov 24, 2017): @lhernanz Thanks.

gitea-mirror referenced this issue

2026-05-05 10:09:03 -06:00

[PR #1108] [MERGED] Thunar #3849

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1108

No description provided.

Rows
Columns