Firejail: Sandbox Pinephone/Pinetab Apps
#1
I noticed interest in security and did a video on getting started with Firejail. While I demo it on the Pinetab (for viewability), I did the video with Pinephone users in mind.

Some users might think Firejail is unrealistically complicated-- the walkthrough will show you it's not.

You don't have to make a custom profile for each app (but you can customize later): Firejail has loads of ready profiles.

I go over what Firejail/Sandboxing is, how to use it, and use Firefox as an example. Towards the end we edit the Firefox button/icon on Phosh to make it run in Firejail sandbox by default. I also cover whitelisting so you do not lock yourself out of files while on Firefox.

Check it out here: https://youtu.be/7Q57Nj6Az3U

[Future videos will use another camera app- sorry about a couple moments of autofocus blurs!]
- RTP

"In the beginner's mind there are many possibilities, in the expert's mind there are few." -Shunryu Suzuki


[ Pinephone Original | Pinetab v1 / v2 Enjoyer ]


Linux Device Privacy / Security Playlist



  Reply
#2
I'm a big fan of firejail. I use it on all of my Linux devices. Firejail is awesome Smile I've also tinkered with Firejail and appimage. Would be nice to use some of this off the shelf stuff to make a nice app store right?
  Reply
#3
Thanks. It's mentioned in the mobian wiki, but has a link to the arch wiki rather than giving details.
https://wiki.mobian-project.org/doku.php...sandboxing

Regarding firejail/appinage for an app store, isn't that more or less what flatpak and snap are doing?
  Reply
#4
(02-23-2021, 09:17 AM)wibble Wrote: Thanks. It's mentioned in the mobian wiki, but has a link to the arch wiki rather than giving details.
https://wiki.mobian-project.org/doku.php...sandboxing

Regarding firejail/appinage for an app store, isn't that more or less what flatpak and snap are doing?


Ah thanks for mentioning. I just now edited Mobian wiki to add some of the stuff mentioned in video as an option after Bubblewrap. Smile
- RTP

"In the beginner's mind there are many possibilities, in the expert's mind there are few." -Shunryu Suzuki


[ Pinephone Original | Pinetab v1 / v2 Enjoyer ]


Linux Device Privacy / Security Playlist



  Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Writing apps/programs for pine phone katesfb 7 4,743 03-11-2024, 10:42 PM
Last Post: Emelia525
  PinePhone - boot from microSD laserpyramid 5 299 03-06-2024, 06:37 PM
Last Post: aular
  Are you using the Pinephone as your daily driver? jro 157 105,083 02-18-2024, 11:33 PM
Last Post: aular
  2020 PinePhone Manjaro CE EU for sale, name your price astrojuanlu 7 1,523 02-14-2024, 04:51 PM
Last Post: astrojuanlu
  pinephone is not bootble for the box. ijij 1 459 01-19-2024, 01:29 PM
Last Post: fxc
  Multiple issues with the Pinephone MTXP 12 1,937 12-28-2023, 07:55 AM
Last Post: MTXP
  pinephone repair shop shengchieh 0 381 12-26-2023, 02:42 PM
Last Post: shengchieh
  sudo nano file saving pinephone beta edition CharlesGnarley 4 1,479 12-22-2023, 03:44 PM
Last Post: Kevin Kofler
  Android bank apps ionmich 4 1,512 12-12-2023, 01:01 PM
Last Post: mannzrespouse
  Can't get Mobian on PinePhone to recognise USB-C docking bar duncan_bayne 9 6,600 12-04-2023, 02:14 AM
Last Post: Peter Gamma

Forum Jump:


Users browsing this thread: 1 Guest(s)