mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #1309] Pushing changes/limitations upstream #892
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#892
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @breznak on GitHub (May 25, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1309
I'd like to ask about your experience with pushing the improvements (esp. dropped capabilities) from the profiles here into the upstream packages?
Ideally, there would be no need for this (awesome) tool.
@reinerh commented on GitHub (May 25, 2017):
Pushing security improvements to upstream projects is of course a good idea.
But it's not possible to put every feature offered by firejail into individual projects, especially as some functionalities require root permissions.
@SYN-cook commented on GitHub (May 26, 2017):
About experience: I had a conversation with KDE people regarding Baloo a while ago, and I was told that any work for implementing e.g. a seccomp filter is indeed very welcome. I actually would have done it myself, but I unfortunately don't speak C++.
My guess is: Especially if you are willing to contribute code and time, you will be welcome mostly everywhere.