github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #1759] Requesting help regarding SoulseekQT profile #1193

New issue

Closed

opened 2026-05-05 07:37:57 -06:00 by gitea-mirror · 5 comments

gitea-mirror commented

2026-05-05 07:37:57 -06:00

Owner

Originally created by @qutetemp on GitHub (Feb 3, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1759

SoulseekQT is a closed source music piracy program I don't trust at all. Sadly it has some features no other client has at the moment like folder view and it's quite popular especially for obscure stuff.
I don't trust it at all.

Ideally I would like to achieve a state where after it runs only the my downloads remain.On download it creates a "Soulseek Downloads" folder inside the HOME dir.
I'm thinking overlay with whitelist after getting the latest master is the best idea but I'm honestly kind of confused and I thought it's best to ask before.

Here is the profile I have so far by looking at other software.
http://ix.io/FbJ

Originally created by @qutetemp on GitHub (Feb 3, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/1759 SoulseekQT is a closed source music piracy program I don't trust at all. Sadly it has some features no other client has at the moment like folder view and it's quite popular especially for obscure stuff. I don't trust it at all. Ideally I would like to achieve a state where after it runs only the my downloads remain.On download it creates a "Soulseek Downloads" folder inside the HOME dir. I'm thinking overlay with whitelist after getting the latest master is the best idea but I'm honestly kind of confused and I thought it's best to ask before. Here is the profile I have so far by looking at other software. http://ix.io/FbJ

gitea-mirror closed this issue

2026-05-05 07:37:58 -06:00

gitea-mirror commented

2026-05-05 07:38:01 -06:00

Author

Owner

@Vincent43 commented on GitHub (Feb 7, 2018):

You can use --build option: firejail --build=<app_name>.profile <app_name> then try to use every feature you need for this app. The copy and/or adjust created profile.

@Vincent43 commented on GitHub (Feb 7, 2018): You can use `--build` [option](https://github.com/netblue30/firejail/blob/master/src/man/firejail.txt#L163): `firejail --build=<app_name>.profile <app_name>` then try to use every feature you need for this app. The copy and/or adjust created profile.

gitea-mirror commented

2026-05-05 07:38:02 -06:00

Author

Owner

@qutetemp commented on GitHub (Feb 9, 2018):

I've having some trouble regarding folder creation.
For example by default when you download something it sends all the downloads to

~/Soulseek\ Downloads/downloading/[name of the user you're downloading from]/[name of the folder you're downloading]

and then moves the fully completed downloaded folder to

~/Soulseek\ Downloads/complete/[name of the user you're downloading from]/[name of the folder you're downloading]

I can't get downloads to show up.

Here's what I added to the profile

mkdir ~/Soulseek Downloads
noblacklist ~/Soulseek Downloads/downloading
whitelist ~/Soulseek Downloads/downloading
noblacklist ~/Soulseek Downloads/complete
whitelist ~/Soulseek Downloads/complete

I think I'm not understanding how to properly use whitelist.

@qutetemp commented on GitHub (Feb 9, 2018): I've having some trouble regarding folder creation. For example by default when you download something it sends all the downloads to ~/Soulseek\ Downloads/downloading/[name of the user you're downloading from]/[name of the folder you're downloading] and then moves the fully completed downloaded folder to ~/Soulseek\ Downloads/complete/[name of the user you're downloading from]/[name of the folder you're downloading] I can't get downloads to show up. Here's what I added to the profile mkdir ~/Soulseek Downloads noblacklist ~/Soulseek Downloads/downloading whitelist ~/Soulseek Downloads/downloading noblacklist ~/Soulseek Downloads/complete whitelist ~/Soulseek Downloads/complete I think I'm not understanding how to properly use whitelist.

gitea-mirror commented

2026-05-05 07:38:03 -06:00

Author

Owner

@SkewedZeppelin commented on GitHub (Feb 9, 2018):

Here is a completely untested profile that you can try

# Firejail profile for Soulseek
# This file is overwritten after every install/update
# Persistent local customizations
include /etc/firejail/Soulseek.local
# Persistent global definitions
include /etc/firejail/globals.local

#noblacklist ${HOME}/Soulseek Downloads

include /etc/firejail/disable-common.inc
include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-passwdmgr.inc
include /etc/firejail/disable-programs.inc

mkdir ${HOME}/Soulseek Downloads
whitelist ${HOME}/Soulseek Downloads
include /etc/firejail/whitelist-var-common.inc

caps.drop all
ipc-namespace
netfilter
no3d
nodvd
nogroups
nonewprivs
noroot
nosound
notv
novideo
protocol unix,inet,inet6
seccomp
shell none

private-dev
private-tmp

noexec ${HOME}
noexec /tmp

save it to ~/.config/firejail/[program].profile

and if it does work, don't expect it to be upstreamed, see #1613

@SkewedZeppelin commented on GitHub (Feb 9, 2018): Here is a completely untested profile that you can try ``` # Firejail profile for Soulseek # This file is overwritten after every install/update # Persistent local customizations include /etc/firejail/Soulseek.local # Persistent global definitions include /etc/firejail/globals.local #noblacklist ${HOME}/Soulseek Downloads include /etc/firejail/disable-common.inc include /etc/firejail/disable-devel.inc include /etc/firejail/disable-passwdmgr.inc include /etc/firejail/disable-programs.inc mkdir ${HOME}/Soulseek Downloads whitelist ${HOME}/Soulseek Downloads include /etc/firejail/whitelist-var-common.inc caps.drop all ipc-namespace netfilter no3d nodvd nogroups nonewprivs noroot nosound notv novideo protocol unix,inet,inet6 seccomp shell none private-dev private-tmp noexec ${HOME} noexec /tmp ``` save it to ~/.config/firejail/[program].profile and if it does work, don't expect it to be upstreamed, see #1613

gitea-mirror commented

2026-05-05 07:38:05 -06:00

Author

Owner

@Vincent43 commented on GitHub (Feb 9, 2018):

@qutetemp use only top directory, i.e:

noblacklist ~/Soulseek Downloads
whitelist ~/Soulseek Downloads

@Vincent43 commented on GitHub (Feb 9, 2018): @qutetemp use only top directory, i.e: ``` noblacklist ~/Soulseek Downloads whitelist ~/Soulseek Downloads ```

gitea-mirror commented

2026-05-05 07:38:06 -06:00

Author

Owner

@qutetemp commented on GitHub (Feb 10, 2018):

Thank you for all the help.
Here's the final profile in case someone needs it eventually.
http://sprunge.us/icZH

@qutetemp commented on GitHub (Feb 10, 2018): Thank you for all the help. Here's the final profile in case someone needs it eventually. http://sprunge.us/icZH

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1193

No description provided.

Rows
Columns