-
|
Is it possible to firejail the CUPS printer server? It seems like there's no profile shipped with firejail. It'd be great since I need to use some rather dodgy proprietary drivers for my printer (thanks, Samsung!) |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 1 reply
-
|
There isn't a dedicated Firejail profile for CUPS-related services indeed, so you will have to put something together for your CUPS use cases yourself. I'd start with our generic server.profile and experiment with hardening that further cfr. fdns and unbound. Similar sandboxing via Feel free to open an issue if you run into any problems or have additional questions on this topic. |
Beta Was this translation helpful? Give feedback.
-
|
Thanks! These resources will be a great starting point. |
Beta Was this translation helpful? Give feedback.
There isn't a dedicated Firejail profile for CUPS-related services indeed, so you will have to put something together for your CUPS use cases yourself. I'd start with our generic server.profile and experiment with hardening that further cfr. fdns and unbound. Similar sandboxing via
systemdhardening is an alternative option, e.g. this. We have a comparison page on our wiki that might come in handy for a job like this.Feel free to open an issue if you run into any problems or have additional questions on this topic.