github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #1178] question: how can i sandbox a DE #808

New issue

Closed

opened 2026-05-05 06:53:07 -06:00 by gitea-mirror · 4 comments

gitea-mirror commented

2026-05-05 06:53:07 -06:00

Owner

Originally created by @nyancat18 on GitHub (Mar 29, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1178

how can i sandbox a desktu? (lxde/xfce) ?

just like a docker

Originally created by @nyancat18 on GitHub (Mar 29, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1178 how can i sandbox a desktu? (lxde/xfce) ? just like a docker

gitea-mirror

2026-05-05 06:53:07 -06:00

closed this issue
added the
information_old
label

gitea-mirror commented

2026-05-05 06:53:12 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (Mar 30, 2017):

One easy way is to run it within a restricted login shell. Just keep in mind that anything you launch within that DE would then be jailed by the profile of the DE rather than the profile of the program. Why sandbox the entire DE?

@chiraag-nataraj commented on GitHub (Mar 30, 2017): One easy way is to run it within a restricted login shell. Just keep in mind that anything you launch within that DE would then be jailed by the profile of the _DE_ rather than the profile of the _program_. Why sandbox the entire DE?

gitea-mirror commented

2026-05-05 06:53:14 -06:00

Author

Owner

@reinerh commented on GitHub (Mar 30, 2017):

I also don't think it's a good idea.
You would have to use a profile that is so permissive that all your programs started inside the DE still work.
Better individually jail your applications.

@reinerh commented on GitHub (Mar 30, 2017): I also don't think it's a good idea. You would have to use a profile that is so permissive that all your programs started inside the DE still work. Better individually jail your applications.

gitea-mirror commented

2026-05-05 06:53:16 -06:00

Author

Owner

@Fred-Barclay commented on GitHub (Mar 30, 2017):

Make that three of us who don't think it's a good idea. 😉 Any profile that could jail a DE and still allow all your programmes to work would probably be a very weak profile.

@Fred-Barclay commented on GitHub (Mar 30, 2017): Make that three of us who don't think it's a good idea. :wink: Any profile that could jail a DE and still allow all your programmes to work would probably be a very weak profile.

gitea-mirror commented

2026-05-05 06:53:18 -06:00

Author

Owner

@netblue30 commented on GitHub (Mar 31, 2017):

I would stay away, the profile will be too permissive. There is a /etc/firejail/openbox.profile, mainly used or x11=xephyr if you want something to start from if you build your own profile.

@netblue30 commented on GitHub (Mar 31, 2017): I would stay away, the profile will be too permissive. There is a /etc/firejail/openbox.profile, mainly used or x11=xephyr if you want something to start from if you build your own profile.

gitea-mirror referenced this issue

2026-05-05 10:07:24 -06:00

[PR #808] [MERGED] Added tracelog #3759

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#808

No description provided.

Rows
Columns