[GH-ISSUE #1659] Profile needed for MasterPDFeditor #1120

Closed
opened 2026-05-05 07:29:47 -06:00 by gitea-mirror · 2 comments
Owner

Originally created by @frank-github on GitHub (Nov 26, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1659

Hi,

need a profile for Master PDF Editor for Linux
https://code-industry.net/free-pdf-editor/

tried it myself by copying and changing qpdfview.profile
but program is not started for any reason if this one items are included (like qpdfview)

  memory-deny-write-execute

do I need this? No security problem, if I did not using this both lines?

any hint/tips are welcome :-)

Frank

Originally created by @frank-github on GitHub (Nov 26, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1659 Hi, need a profile for Master PDF Editor for Linux https://code-industry.net/free-pdf-editor/ tried it myself by copying and changing qpdfview.profile but program is not started for any reason if this one items are included (like qpdfview) memory-deny-write-execute do I need this? No security problem, if I did not using this both lines? any hint/tips are welcome :-) Frank
gitea-mirror 2026-05-05 07:29:48 -06:00
Author
Owner

@smitsohu commented on GitHub (Nov 28, 2017):

Hi @frank-github, it is a common experience that applications don't tolerate all available sandbox features. Especially memory-deny-write-execute causes trouble in many cases.

Just try to confine the editor as tight as possible, while keeping everything working that is important to you. When the application fails to even start, that's kind of a hard boundary.

If you want you can experiment with some additional profile options like

no3d
net none
blacklist /run/user/*/bus
<!-- gh-comment-id:347483066 --> @smitsohu commented on GitHub (Nov 28, 2017): Hi @frank-github, it is a common experience that applications don't tolerate all available sandbox features. Especially `memory-deny-write-execute` causes trouble in many cases. Just try to confine the editor as tight as possible, while keeping everything working that is important to you. When the application fails to even start, that's kind of a hard boundary. If you want you can experiment with some additional profile options like ``` no3d net none blacklist /run/user/*/bus ```
Author
Owner

@smitsohu commented on GitHub (Nov 28, 2017):

Just skimming through the handbook... chances are slim but it might be possible to keep memory-deny-write-execute if you disable JavaScript in the settings.

<!-- gh-comment-id:347502854 --> @smitsohu commented on GitHub (Nov 28, 2017): Just skimming through the handbook... chances are slim but it might be possible to keep `memory-deny-write-execute` if you disable JavaScript in the settings.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1120
No description provided.