[GH-ISSUE #45] Use generic.profile by default #24

Closed
opened 2026-05-05 04:46:09 -06:00 by gitea-mirror · 2 comments
Owner

Originally created by @ghost on GitHub (Aug 26, 2015).
Original GitHub issue: https://github.com/netblue30/firejail/issues/45

Hi netblue30 and contributors!

I'd like to see firejail parse generic.profile by default unless:

  • Another profile is explicitly specified on the command line, or
  • Another profile matches the extracted command name, or
  • A flag is specified to disable it (ex. "--nodefault")

Don't get me wrong: I love the flexibility of firejail to specify all kinds of options. The target here is the new/desktop user who wants to sandbox but may be getting less security than they expect from sandboxing a profile-less program.

Feel free to reject this suggestion if you think it is the wrong direction for the firejail project. Otherwise, I'd be happy to make the change and submit a pull request.

Originally created by @ghost on GitHub (Aug 26, 2015). Original GitHub issue: https://github.com/netblue30/firejail/issues/45 Hi netblue30 and contributors! I'd like to see firejail parse generic.profile by default unless: - Another profile is explicitly specified on the command line, or - Another profile matches the extracted command name, or - A flag is specified to disable it (ex. "--nodefault") Don't get me wrong: I love the flexibility of firejail to specify all kinds of options. The target here is the new/desktop user who wants to sandbox but may be getting less security than they expect from sandboxing a profile-less program. Feel free to reject this suggestion if you think it is the wrong direction for the firejail project. Otherwise, I'd be happy to make the change and submit a pull request.
gitea-mirror 2026-05-05 04:46:09 -06:00
Author
Owner

@netblue30 commented on GitHub (Aug 26, 2015):

It is a good idea, send a pull request! Make the flag "--noprofile" instead of "--nodefault". Thanks!

<!-- gh-comment-id:135051615 --> @netblue30 commented on GitHub (Aug 26, 2015): It is a good idea, send a pull request! Make the flag "--noprofile" instead of "--nodefault". Thanks!
Author
Owner

@ghost commented on GitHub (Aug 26, 2015):

Awesome, will do sometime in the next week.

<!-- gh-comment-id:135056548 --> @ghost commented on GitHub (Aug 26, 2015): Awesome, will do sometime in the next week.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#24
No description provided.