[PR #2649] [MERGED] Add a conditional to control DRM/noexec exception for browsers #4467

New issue

Closed

opened 2026-05-05 10:20:41 -06:00 by gitea-mirror · 0 comments

gitea-mirror commented

2026-05-05 10:20:41 -06:00

Owner

📋 Pull Request Information

Original PR: https://github.com/netblue30/firejail/pull/2649
Author: @SkewedZeppelin
Created: 4/13/2019
Status: ✅ Merged
Merged: 4/18/2019
Merged by: @netblue30

Base: master ← Head: drm-noexec

📝 Commits (1)

ab78a25 Add a conditional to control DRM/noexec exception for browsers

📊 Changes

9 files changed (+18 additions, -8 deletions)

View changed files

📝 etc/chromium-common.profile (+1 -1)
📝 etc/firefox-common.profile (+1 -1)
📝 etc/firejail.config (+6 -3)
📝 etc/midori.profile (+1 -1)
📝 etc/min.profile (+1 -1)
📝 src/firejail/checkcfg.c (+1 -0)
📝 src/firejail/firejail.h (+1 -0)
📝 src/firejail/profile.c (+5 -0)
📝 src/man/firejail-profile.txt (+1 -1)

📄 Description

Browsers are large attack surface, noexec ${HOME} is fairly important.
Ignoring it just to allow proprietary (malware) DRM to run by default is silly.
Thoughts?

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/netblue30/firejail/pull/2649 **Author:** [@SkewedZeppelin](https://github.com/SkewedZeppelin) **Created:** 4/13/2019 **Status:** ✅ Merged **Merged:** 4/18/2019 **Merged by:** [@netblue30](https://github.com/netblue30) **Base:** `master` ← **Head:** `drm-noexec` --- ### 📝 Commits (1) - [`ab78a25`](https://github.com/netblue30/firejail/commit/ab78a250dbf889898427f46f52260425ccc8eda5) Add a conditional to control DRM/noexec exception for browsers ### 📊 Changes **9 files changed** (+18 additions, -8 deletions) <details> <summary>View changed files</summary> 📝 `etc/chromium-common.profile` (+1 -1) 📝 `etc/firefox-common.profile` (+1 -1) 📝 `etc/firejail.config` (+6 -3) 📝 `etc/midori.profile` (+1 -1) 📝 `etc/min.profile` (+1 -1) 📝 `src/firejail/checkcfg.c` (+1 -0) 📝 `src/firejail/firejail.h` (+1 -0) 📝 `src/firejail/profile.c` (+5 -0) 📝 `src/man/firejail-profile.txt` (+1 -1) </details> ### 📄 Description Browsers are large attack surface, `noexec ${HOME}` is fairly important. Ignoring it just to allow proprietary (malware) DRM to run by default is silly. Thoughts? --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>