Firejail: Sandbox Pinephone/Pinetab Apps
#1
I noticed interest in security and did a video on getting started with Firejail. While I demo it on the Pinetab (for viewability), I did the video with Pinephone users in mind.

Some users might think Firejail is unrealistically complicated-- the walkthrough will show you it's not.

You don't have to make a custom profile for each app (but you can customize later): Firejail has loads of ready profiles.

I go over what Firejail/Sandboxing is, how to use it, and use Firefox as an example. Towards the end we edit the Firefox button/icon on Phosh to make it run in Firejail sandbox by default. I also cover whitelisting so you do not lock yourself out of files while on Firefox.

Check it out here: https://youtu.be/7Q57Nj6Az3U

[Future videos will use another camera app- sorry about a couple moments of autofocus blurs!]
- RTP

"In the beginner's mind there are many possibilities, in the expert's mind there are few." -Shunryu Suzuki

My Blog: https://politictech.wordpress.com
  Reply
#2
I'm a big fan of firejail. I use it on all of my Linux devices. Firejail is awesome Smile I've also tinkered with Firejail and appimage. Would be nice to use some of this off the shelf stuff to make a nice app store right?
  Reply
#3
Thanks. It's mentioned in the mobian wiki, but has a link to the arch wiki rather than giving details.
https://wiki.mobian-project.org/doku.php...sandboxing

Regarding firejail/appinage for an app store, isn't that more or less what flatpak and snap are doing?
  Reply
#4
(02-23-2021, 09:17 AM)wibble Wrote: Thanks. It's mentioned in the mobian wiki, but has a link to the arch wiki rather than giving details.
https://wiki.mobian-project.org/doku.php...sandboxing

Regarding firejail/appinage for an app store, isn't that more or less what flatpak and snap are doing?


Ah thanks for mentioning. I just now edited Mobian wiki to add some of the stuff mentioned in video as an option after Bubblewrap. Smile
- RTP

"In the beginner's mind there are many possibilities, in the expert's mind there are few." -Shunryu Suzuki

My Blog: https://politictech.wordpress.com
  Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Pinephone on Cricket Wireless (USA) no service acm006 16 924 3 hours ago
Last Post: Zebulon Walton
  Mobian Pinephone already out of stock richieeee 13 1,151 9 hours ago
Last Post: alontra
Heart What native PinePhone application would you like to see in the near future? kern707 25 1,599 Today, 07:52 AM
Last Post: dawg161
  Hosting a website on a PinePhone, etc. a-l 18 865 Today, 03:55 AM
Last Post: a-l
  PinePhone Cross Compiler Install dgdimick 2 191 02-22-2021, 11:40 PM
Last Post: chaseleif
  Pinephone inexpensive carriers and free carriers linux_n 0 120 02-22-2021, 11:31 PM
Last Post: linux_n
  Selling Spare Pinephone Motherboard (2GB) PixelPaintbrush 0 119 02-22-2021, 06:18 PM
Last Post: PixelPaintbrush
  PinePhone SIM slot Niek 2 261 02-21-2021, 01:46 AM
Last Post: anhilde
  PinePhone Security TurpentineOS 1 232 02-20-2021, 02:06 PM
Last Post: wibble
  Pinephone 3GB convergence kit for sale Europe (Poland) as400 2 207 02-20-2021, 02:01 PM
Last Post: as400

Forum Jump:


Users browsing this thread: 2 Guest(s)