-
I would like to run mega cloud backup app in firejail. I'm on Fedora37. This app is an rpm and will be installed by dnf. This app is not on Firejail's list so I am not sure how to do this correctly. I want to give this app access to only one directory (the one it will be backing up). I don't want it poking around my system further than that. From what I have been able to understand from the docs, using |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 7 replies
-
Here are some general pointers on creating profiles:
You will have to add these manually. The workflow goes like this: add blacklists to disable-common.local or disable-programs.local (so other sandboxes can't see them) and noblacklist/whitelist in the app's profile.
Not sure I understand correctly. Obviously the app will need to be able to see its configuration data, plus the backup dir. Usually these are different locations in the filesystem.
When creating a new profile it's common practice to either get the needed info from available documentation and/or running it unsandboxed once to check what directories it creates/accesses so you know what paths are the bare minimum to have a working sandbox.
In cases like this it can be very insightful to check whether there are existing profiles for applications offering similar functionality. Peeking inside our |
Beta Was this translation helpful? Give feedback.
Here are some general pointers on creating profiles:
You will have to add these manually. The workflow goes like this: add blacklists to disable-common.local or disable-programs.local (so other sandboxes can't see them) and noblacklist/whitelist in the app's profile.
Not sure I understand correctly. Obviously the app will need to be able to see its configuration data, plus the backup dir. Usually these are different locations in the filesystem.