[PR #993] [MERGED] Replace keepassx whitelisting with keepass whitelisting #3816

New issue

Closed

opened 2026-05-05 10:08:25 -06:00 by gitea-mirror · 0 comments

gitea-mirror commented

2026-05-05 10:08:25 -06:00

Owner

📋 Pull Request Information

Original PR: https://github.com/netblue30/firejail/pull/993
Author: @SYN-cook
Created: 12/20/2016
Status: ✅ Merged
Merged: 12/20/2016
Merged by: @netblue30

Base: master ← Head: master

📝 Commits (10+)

b6b8054 don't whitelist keepassx in browser profiles
f11981a don't whitelist keepassx in browser profiles
a63c767 generalize keepass config
5010cdc generalize keepass config
4ca75c7 don't whitelist keepassx in browser profiles
693574d don't whitelist keepassx in browser profiles
fb993dc generalize keepass config
3ddf3b9 don't whitelist keepassx in browser profiles
9fa24ba don't whitelist keepassx in browser profiles
11314d5 don't whitelist keepassx in browser profiles

📊 Changes

16 files changed (+80 additions, -73 deletions)

View changed files

📝 etc/abrowser.profile (+5 -5)
📝 etc/chromium.profile (+5 -4)
📝 etc/cyberfox.profile (+5 -5)
📝 etc/firefox.profile (+5 -5)
📝 etc/flashpeak-slimjet.profile (+5 -4)
📝 etc/google-chrome-beta.profile (+5 -4)
📝 etc/google-chrome-unstable.profile (+5 -4)
📝 etc/google-chrome.profile (+5 -5)
📝 etc/icecat.profile (+5 -5)
📝 etc/inox.profile (+5 -4)
📝 etc/netsurf.profile (+5 -4)
📝 etc/opera-beta.profile (+5 -5)
📝 etc/opera.profile (+5 -5)
📝 etc/palemoon.profile (+5 -5)
📝 etc/seamonkey.profile (+5 -4)
📝 etc/vivaldi.profile (+5 -5)

📄 Description

Removing KeePassX from browser profiles: KeePassX currently doesn't support browser extensions, and thus all browser extensions continue to rely on KeePass, a fitting KeePass plugin and Mono. While this may change in the future and make it necessary to include whitelisting for KeePassX again, its configuration file contains information that can be valuable for attackers (password generator settings, other security settings), and so I would like to join the suggestion of @derekyerger to remove KeePassX whitelisting from browser profiles as long as it is not necessary.
Addition of KeePass to browser profiles: as detailed above.
Removing the whitelist ~/keepassx.kdbx: Harmonized with keepass.profile, where this file is blacklisted (via disable-passwdmgr.inc).

#937

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/netblue30/firejail/pull/993 **Author:** [@SYN-cook](https://github.com/SYN-cook) **Created:** 12/20/2016 **Status:** ✅ Merged **Merged:** 12/20/2016 **Merged by:** [@netblue30](https://github.com/netblue30) **Base:** `master` ← **Head:** `master` --- ### 📝 Commits (10+) - [`b6b8054`](https://github.com/netblue30/firejail/commit/b6b8054a11e803108e42c547399da453ad270ee3) don't whitelist keepassx in browser profiles - [`f11981a`](https://github.com/netblue30/firejail/commit/f11981a05ecc2f932956d20f0f630488f5b6264f) don't whitelist keepassx in browser profiles - [`a63c767`](https://github.com/netblue30/firejail/commit/a63c767e0cd4fc977eb2e39e533af5ea9b4ad79c) generalize keepass config - [`5010cdc`](https://github.com/netblue30/firejail/commit/5010cdc83234afb57511fd599c2d191d18cd2f63) generalize keepass config - [`4ca75c7`](https://github.com/netblue30/firejail/commit/4ca75c7101e5c43c554750e16a6b1793cac2b91c) don't whitelist keepassx in browser profiles - [`693574d`](https://github.com/netblue30/firejail/commit/693574d4873bc88111506458ddfe70a8ce3275ce) don't whitelist keepassx in browser profiles - [`fb993dc`](https://github.com/netblue30/firejail/commit/fb993dc8b9128ba180e9b290fad52c1c8fda5b93) generalize keepass config - [`3ddf3b9`](https://github.com/netblue30/firejail/commit/3ddf3b9ff9ffed68d46920469f3ecbce0b8b990a) don't whitelist keepassx in browser profiles - [`9fa24ba`](https://github.com/netblue30/firejail/commit/9fa24baad1c8ebd451f2854194240baafe14f96e) don't whitelist keepassx in browser profiles - [`11314d5`](https://github.com/netblue30/firejail/commit/11314d58aeaa9e8c86e4d551a13d676e5cc338b5) don't whitelist keepassx in browser profiles ### 📊 Changes **16 files changed** (+80 additions, -73 deletions) <details> <summary>View changed files</summary> 📝 `etc/abrowser.profile` (+5 -5) 📝 `etc/chromium.profile` (+5 -4) 📝 `etc/cyberfox.profile` (+5 -5) 📝 `etc/firefox.profile` (+5 -5) 📝 `etc/flashpeak-slimjet.profile` (+5 -4) 📝 `etc/google-chrome-beta.profile` (+5 -4) 📝 `etc/google-chrome-unstable.profile` (+5 -4) 📝 `etc/google-chrome.profile` (+5 -5) 📝 `etc/icecat.profile` (+5 -5) 📝 `etc/inox.profile` (+5 -4) 📝 `etc/netsurf.profile` (+5 -4) 📝 `etc/opera-beta.profile` (+5 -5) 📝 `etc/opera.profile` (+5 -5) 📝 `etc/palemoon.profile` (+5 -5) 📝 `etc/seamonkey.profile` (+5 -4) 📝 `etc/vivaldi.profile` (+5 -5) </details> ### 📄 Description 1. Removing KeePassX from browser profiles: KeePassX currently doesn't support browser extensions, and thus all browser extensions continue to rely on KeePass, a fitting KeePass plugin and Mono. While this may change in the future and make it necessary to include whitelisting for KeePassX again, its configuration file contains information that can be valuable for attackers (password generator settings, other security settings), and so I would like to join the suggestion of @derekyerger to remove KeePassX whitelisting from browser profiles as long as it is not necessary. 2. Addition of KeePass to browser profiles: as detailed above. 3. Removing the `whitelist ~/keepassx.kdbx`: Harmonized with keepass.profile, where this file is blacklisted (via disable-passwdmgr.inc). #937 --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

gitea-mirror

2026-05-05 10:08:25 -06:00

closed this issue
added the
pull-request
label

gitea-mirror referenced this issue

2026-05-05 10:28:28 -06:00

[PR #3816] [MERGED] New profiles for alacarte,tootle,photoflare #4891

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3816

No description provided.

Rows
Columns