Firejail: Sandbox Pinephone/Pinetab Apps
#1
I noticed interest in security and did a video on getting started with Firejail. While I demo it on the Pinetab (for viewability), I did the video with Pinephone users in mind.

Some users might think Firejail is unrealistically complicated-- the walkthrough will show you it's not.

You don't have to make a custom profile for each app (but you can customize later): Firejail has loads of ready profiles.

I go over what Firejail/Sandboxing is, how to use it, and use Firefox as an example. Towards the end we edit the Firefox button/icon on Phosh to make it run in Firejail sandbox by default. I also cover whitelisting so you do not lock yourself out of files while on Firefox.

Check it out here: https://youtu.be/7Q57Nj6Az3U

[Future videos will use another camera app- sorry about a couple moments of autofocus blurs!]
- RTP

"In the beginner's mind there are many possibilities, in the expert's mind there are few." -Shunryu Suzuki

My Blog: https://politictech.wordpress.com
  Reply
#2
I'm a big fan of firejail. I use it on all of my Linux devices. Firejail is awesome Smile I've also tinkered with Firejail and appimage. Would be nice to use some of this off the shelf stuff to make a nice app store right?
  Reply
#3
Thanks. It's mentioned in the mobian wiki, but has a link to the arch wiki rather than giving details.
https://wiki.mobian-project.org/doku.php...sandboxing

Regarding firejail/appinage for an app store, isn't that more or less what flatpak and snap are doing?
  Reply
#4
(02-23-2021, 09:17 AM)wibble Wrote: Thanks. It's mentioned in the mobian wiki, but has a link to the arch wiki rather than giving details.
https://wiki.mobian-project.org/doku.php...sandboxing

Regarding firejail/appinage for an app store, isn't that more or less what flatpak and snap are doing?


Ah thanks for mentioning. I just now edited Mobian wiki to add some of the stuff mentioned in video as an option after Bubblewrap. Smile
- RTP

"In the beginner's mind there are many possibilities, in the expert's mind there are few." -Shunryu Suzuki

My Blog: https://politictech.wordpress.com
  Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
Heart What native PinePhone application would you like to see in the near future? kern707 54 5,221 2 hours ago
Last Post: biketool
  Pinephone on Cricket Wireless (USA) no service acm006 38 3,559 04-15-2021, 12:06 AM
Last Post: calinb
  Pinephone inexpensive carriers and free carriers linux_n 6 765 04-13-2021, 10:05 AM
Last Post: pagesix1536
  PinePhone can't make outbound calls rocketchik24 3 404 04-11-2021, 03:57 PM
Last Post: dukla2000
  PlayStation emulator on Pinephone PinePS1 2 1,205 04-08-2021, 01:43 AM
Last Post: naymeo
Question Pinephone mainboards on stock again somewhen? myxor 4 439 04-07-2021, 06:39 AM
Last Post: biketool
  UPDATED: 17-distro multi-boot image for Pinephone (incl. 3GiB variant) megous 132 79,042 04-06-2021, 05:22 AM
Last Post: Codenul
Lightbulb Next Pinephone should be smaller (imho) _kiwi 7 642 04-05-2021, 11:23 PM
Last Post: biketool
  Windows 10 (KVM) on PinePhone Danct12 5 2,405 04-04-2021, 09:05 AM
Last Post: nas
  pinephone 2 specs discussion - 5G WiFi6 BT5 NFC? - mitcoes 13 1,137 04-02-2021, 06:55 AM
Last Post: bitsandnumbers

Forum Jump:


Users browsing this thread: 1 Guest(s)