[GH-ISSUE #2417] browsers: undocumented ?BROWSER_DISABLE_U2F conditional #1614

Closed
opened 2026-05-05 08:16:14 -06:00 by gitea-mirror · 5 comments
Owner

Originally created by @curiosity-seeker on GitHub (Feb 18, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2417

I just noticed that both profiles contain the line:

?BROWSER_DISABLE_U2F: nou2f

I suspect that this is an error as I haven't seen this documented anywhere.

Originally created by @curiosity-seeker on GitHub (Feb 18, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/2417 I just noticed that both profiles contain the line: `?BROWSER_DISABLE_U2F: nou2f` I suspect that this is an error as I haven't seen this documented anywhere.
gitea-mirror 2026-05-05 08:16:14 -06:00
Author
Owner

@ghost commented on GitHub (Feb 18, 2019):

Not a typo. This is documented in man firejail-profile and code is here #L154+.

<!-- gh-comment-id:464756473 --> @ghost commented on GitHub (Feb 18, 2019): Not a typo. This is documented in man [firejail-profile](https://github.com/netblue30/firejail/blob/c083a7b737050c532977b46fac6400f1dbc24ff6/src/man/firejail-profile.txt) and code is [here](https://github.com/netblue30/firejail/blob/0d2f252230283ffcd97795b65e5f29ceaf9bf824/src/firejail/profile.c) #L154+.
Author
Owner

@curiosity-seeker commented on GitHub (Feb 18, 2019):

Oops - you're right! Sorry!

<!-- gh-comment-id:464758844 --> @curiosity-seeker commented on GitHub (Feb 18, 2019): Oops - you're right! Sorry!
Author
Owner

@ghost commented on GitHub (Feb 18, 2019):

No problem. I tended to forget firejail has more than one man page too ;)

<!-- gh-comment-id:464759417 --> @ghost commented on GitHub (Feb 18, 2019): No problem. I tended to forget firejail has more than one man page too ;)
Author
Owner

@curiosity-seeker commented on GitHub (Feb 18, 2019):

Indeed ;-)

I understand the "?HAS_APPIMAGE: whitelist ${HOME}/special/appimage/dir" example in man firejail-profile. But I must admit that I'm having trouble to understand the purpose of "?BROWSER_DISABLE_U2F: nou2f" ....

<!-- gh-comment-id:464762799 --> @curiosity-seeker commented on GitHub (Feb 18, 2019): Indeed ;-) I understand the "?HAS_APPIMAGE: whitelist ${HOME}/special/appimage/dir" example in man firejail-profile. But I must admit that I'm having trouble to understand the purpose of "?BROWSER_DISABLE_U2F: nou2f" ....
Author
Owner

@SkewedZeppelin commented on GitHub (Feb 18, 2019):

But I must admit that I'm having trouble to understand the purpose of

u2f devices were disabled for all of the profiles
u2f devices are an important tool and should be as easy as possible to get working

so instead of users having to create local profile files for their browser, I added a config option so they can just edit /etc/firejail/firejail.config to get them working

<!-- gh-comment-id:464911715 --> @SkewedZeppelin commented on GitHub (Feb 18, 2019): > But I must admit that I'm having trouble to understand the purpose of u2f devices were disabled for all of the profiles u2f devices are an important tool and should be as easy as possible to get working so instead of users having to create local profile files for their browser, I added a config option so they can just edit /etc/firejail/firejail.config to get them working
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1614
No description provided.