[GH-ISSUE #4166] npm and pip profiles #2560

Closed
opened 2026-05-05 09:14:10 -06:00 by gitea-mirror · 4 comments
Owner

Originally created by @muziker on GitHub (Apr 5, 2021).
Original GitHub issue: https://github.com/netblue30/firejail/issues/4166

These are two very popular methods of installing new libraries for coding. Is there a profile for keeping these sandboxed? npm by default installs node_modules locally in the project, and python's pip can have separate library paths from the system installed python using virtualenv. Since both these library managers, together with their interpreters themselves can be compiled and installed separate from the system versions, a sandbox that restricts these should work. Has anyone got a profile for this? Or is the default profile good enough?

Originally created by @muziker on GitHub (Apr 5, 2021). Original GitHub issue: https://github.com/netblue30/firejail/issues/4166 These are two very popular methods of installing new libraries for coding. Is there a profile for keeping these sandboxed? npm by default installs node_modules locally in the project, and python's pip can have separate library paths from the system installed python using virtualenv. Since both these library managers, together with their interpreters themselves can be compiled and installed separate from the system versions, a sandbox that restricts these should work. Has anyone got a profile for this? Or is the default profile good enough?
Author
Owner

@rusty-snake commented on GitHub (Apr 5, 2021):

npm has a profile (npm.profile) which you can easily find by searching for npm.profile on https://github.com/netblue30/firejail/find/master and pip has no profile yet.

<!-- gh-comment-id:813243757 --> @rusty-snake commented on GitHub (Apr 5, 2021): npm has a profile ([npm.profile](https://github.com/netblue30/firejail/blob/master/etc/profile-m-z/npm.profile)) which you can easily find by searching for `npm.profile` on https://github.com/netblue30/firejail/find/master and pip has no profile yet.
Author
Owner

@rusty-snake commented on GitHub (Apr 5, 2021):

Duplicate of #2666

<!-- gh-comment-id:813244277 --> @rusty-snake commented on GitHub (Apr 5, 2021): Duplicate of #2666
Author
Owner

@muziker commented on GitHub (Apr 5, 2021):

I was using the repo version of firejail, so the newer profile isn't there. I'll see if those can work with the older version of firejail

<!-- gh-comment-id:813259085 --> @muziker commented on GitHub (Apr 5, 2021): I was using the repo version of firejail, so the newer profile isn't there. I'll see if those can work with the older version of firejail
Author
Owner

@rusty-snake commented on GitHub (Jun 10, 2021):

I'm closing here due to inactivity, please fell free to request to reopen if you still have this issue.

<!-- gh-comment-id:858441865 --> @rusty-snake commented on GitHub (Jun 10, 2021): I'm closing here due to inactivity, please fell free to request to reopen if you still have this issue.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2560
No description provided.