Skip to content

Commit

Permalink
chromium: disable nodbus
Browse files Browse the repository at this point in the history
Unfortunately nodbus prevents access to site passwords if they are stored in GNOME Keyring[1]. According to docs chromium can store password in 3 different ways:
GNOME Keyring
KWallet 4
plain text

As KWallet storage may be broken in a same way, using nodbus will force chromium to store passwords in plain text which isn't best option for security and for firejail default.

[1] https://wiki.gnome.org/Projects/GnomeKeyring
[2] https://chromium.googlesource.com/chromium/src.git/+/master/docs/linux_password_storage.md
  • Loading branch information
Vincent43 committed Jun 15, 2019
1 parent 2529d1d commit 867c2bc
Showing 1 changed file with 1 addition and 2 deletions.
3 changes: 1 addition & 2 deletions etc/chromium-common.profile
Original file line number Diff line number Diff line change
Expand Up @@ -29,8 +29,7 @@ include whitelist-var-common.inc
apparmor
caps.keep sys_chroot,sys_admin
netfilter
# Breaks Gnome connector - disable if you use that
nodbus
# nodbus - prevents access to passwords saved in GNOME Keyring, also breaks Gnome connector
nodvd
nogroups
notv
Expand Down

0 comments on commit 867c2bc

Please sign in to comment.