[GH-ISSUE #3514] Need a little help regarding vmware profile #2212

New issue

Closed

opened 2026-05-05 08:53:57 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 08:53:57 -06:00

Owner

Originally created by @CodeArtisan00 on GitHub (Jul 16, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3514

include vmware.local

include disable-common.inc
include disable-exec.inc
include disable-interpreters.inc
include disable-passwdmgr.inc
include disable-programs.inc
include disable-xdg.inc

whitelist ~/.vmware
whitelist ~/.cache/vmware

include whitelist-common.inc

caps.drop all
ipc-namespace
netfilter
nodbus
nogroups
notv
shell none


private-etc asound.conf,ca-certificates,dconf,fonts,group,gtk-2.0,gtk-3.0,hostname,hosts,ld.so.cache,localtime,machine-id,conf.d,pulse,resolv.conf,ssl,X11,vmware,vmware-installer,vmware-vix

It's my current vmware profile. what else should I add or omit to harden it?

specs- Manjaro (KDE), Kernel: 5.7.x, Firejail ver: 0.9.62

Originally created by @CodeArtisan00 on GitHub (Jul 16, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3514 ``` include vmware.local include disable-common.inc include disable-exec.inc include disable-interpreters.inc include disable-passwdmgr.inc include disable-programs.inc include disable-xdg.inc whitelist ~/.vmware whitelist ~/.cache/vmware include whitelist-common.inc caps.drop all ipc-namespace netfilter nodbus nogroups notv shell none private-etc asound.conf,ca-certificates,dconf,fonts,group,gtk-2.0,gtk-3.0,hostname,hosts,ld.so.cache,localtime,machine-id,conf.d,pulse,resolv.conf,ssl,X11,vmware,vmware-installer,vmware-vix ``` It's my current vmware profile. what else should I add or omit to harden it? >specs- Manjaro (KDE), Kernel: 5.7.x, Firejail ver: 0.9.62

gitea-mirror closed this issue

2026-05-05 08:53:58 -06:00

gitea-mirror commented

2026-05-05 08:54:00 -06:00

Author

Owner

@ghost commented on GitHub (Jul 16, 2020):

You can use our profile template and test all the additional options you don't have yet.

@ghost commented on GitHub (Jul 16, 2020): You can use our [profile template](https://github.com/netblue30/firejail/blob/master/etc/templates/profile.template) and test all the additional options you don't have yet.

gitea-mirror commented

2026-05-05 08:54:01 -06:00

Author

Owner

@rusty-snake commented on GitHub (Jul 18, 2020):

@Neo00001 if you have followed the notes in the template and did some detailed testing, feel free to open a PR with it so we can review it and bring it upstream.

@rusty-snake commented on GitHub (Jul 18, 2020): @Neo00001 if you have followed the notes in the template and did some detailed testing, feel free to open a PR with it so we can review it and bring it upstream.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2212

No description provided.

Rows
Columns