You are not logged in.
I just installed firejail and I have followed the advice to make firejail only to be executable by users added to the firejail group.
See: https://wiki.archlinux.org/title/Fireja … g_Firejail
Now this would mean, that any program that is configured to run by a custom user (e.g. dnscrypt-proxy, emby-server, syncthing,...) will not be run by firejail anymore unless added to the firejail group?
This also means, that the firejail default of "run anything that does not have a custom.profile file with a standard.profile file" will not be working anymore for such programs which run not as my own user?
This actually opens another security hole by potentially letting some programs run without firejail?
Thanks!
Last edited by Utini (2024-09-04 10:16:31)
Setup 1: Thinkpad T14s G3, 14" FHD - R7 6850U - 32GB RAM - 2TB Solidigm P44 Pro NVME
Setup 2: Thinkpad X1E G1, 15.6" FHD - i7-8850H - 32GB RAM - NVIDIA GTX 1050Ti - 2x 1TB Samsung 970 Pro NVME
Accessories: Filco Majestouch TKL MX-Brown Mini Otaku, Benq XL2420T (144Hz), Lo(w)gitech G400, Puretrak Talent, Sennheiser HD800S + Meier Daccord FF + Meier Classic FF
Offline