[PR #1106] [MERGED] Tighten keepassx #3848

New issue

Closed

opened 2026-05-05 10:09:02 -06:00 by gitea-mirror · 0 comments

gitea-mirror commented

2026-05-05 10:09:02 -06:00

Owner

📋 Pull Request Information

Original PR: https://github.com/netblue30/firejail/pull/1106
Author: @Fred-Barclay
Created: 2/17/2017
Status: ✅ Merged
Merged: 2/19/2017
Merged by: @netblue30

Base: master ← Head: keepassx-pvt_bin

📝 Commits (2)

400ece9 Tightened keepassx profiles.
d3580ea Oops... typo

📊 Changes

2 files changed (+9 additions, -4 deletions)

View changed files

📝 etc/keepassx.profile (+5 -2)
📝 etc/keepassx2.profile (+4 -2)

📄 Description

G'day @netblue30 . This tightens the keepassx profiles a little bit.

I was under the impression net none meant the netlink socket was closed, but firejail --audit says:
MAYBE: I can connect to netlink socket. Network utilities such as iproute2 will work fine in the sandbox. You can use "--protocol" to disable the socket.
So I've kept protocol unix in addition to adding net none. Is that correct?

Cheers!

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/netblue30/firejail/pull/1106 **Author:** [@Fred-Barclay](https://github.com/Fred-Barclay) **Created:** 2/17/2017 **Status:** ✅ Merged **Merged:** 2/19/2017 **Merged by:** [@netblue30](https://github.com/netblue30) **Base:** `master` ← **Head:** `keepassx-pvt_bin` --- ### 📝 Commits (2) - [`400ece9`](https://github.com/netblue30/firejail/commit/400ece953865d42a2619323e82b60257c8ac8f31) Tightened keepassx profiles. - [`d3580ea`](https://github.com/netblue30/firejail/commit/d3580ea355a6582203a929162d6ee7c1d1b634ee) Oops... typo ### 📊 Changes **2 files changed** (+9 additions, -4 deletions) <details> <summary>View changed files</summary> 📝 `etc/keepassx.profile` (+5 -2) 📝 `etc/keepassx2.profile` (+4 -2) </details> ### 📄 Description G'day @netblue30 . This tightens the keepassx profiles a little bit. I was under the impression `net none` meant the netlink socket was closed, but `firejail --audit` says: ```MAYBE: I can connect to netlink socket. Network utilities such as iproute2 will work fine in the sandbox. You can use "--protocol" to disable the socket.``` So I've kept `protocol unix` in addition to adding `net none`. Is that correct? Cheers! --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

gitea-mirror

2026-05-05 10:09:02 -06:00

closed this issue
added the
pull-request
label

gitea-mirror referenced this issue

2026-05-05 10:28:49 -06:00

[PR #3848] [MERGED] Add profiles for MS Edge dev build for Linux and Librewolf #4907

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3848

No description provided.

Rows
Columns