Ability to launch an entire xsession from lightdm?

[aanderse]

Hello,

I'm looking to have an entire user xsession (and every application/process that can be launched by a user) run under a firejail environment. I essentially want to sandbox a user from the rest of the system as soon as they login to either lightdm or ssh. Is this possible, and if so how do I go about setting this up?

Thank you,
Aaron

[netblue30]

This would be very cool! I'll try it out.

[chiraag-nataraj]

But wouldn't that sandbox necessarily have to be somewhat lax? And if so, how useful is it really?

[aanderse]

For something like Kodi I would find it very useful.

[chiraag-nataraj]

Hmm, I see. So more for a special-purpose X session.

[chiraag-nataraj]

What happens if you change the session files to launch firejail lightdm or similar? I have no idea how these programs work anymore (I launch my X session with startx...), but I think the files are either in /etc or /usr/share.