Zaloguj się

cyberpunk · 08-10-2023, 19:17

Mullvad Browser zainstalowałem tak: https://github.com/samsapti/firejailed-mullvad-browser
Firejail działa prawidłowo, czyli blokuje dostęp do wszystkiego poza katalogiem przeglądarki.
Chciałbym mieć dostęp do /home/userd/Pobrane

Dodawałem do firejailed-mullvad-browser.profile

Kod:
noblacklist ${HOME}/userd/Pobrane

noblacklist /home/userd/Pobrane

whitelist ~/Pobrane

whitelist ~/home/userd/Pobrane

Bez rezultatu. Będę wdzięczny za pomoc.
Profil Firejail:

Kod:
# vim: ft=firejail

# Copyright © 2019-2023 rusty-snake and contributors, 2023 Sam A. and contributors

#

# Permission is hereby granted, free of charge, to any person obtaining a copy

# of this software and associated documentation files (the "Software"), to deal

# in the Software without restriction, including without limitation the rights

# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell

# copies of the Software, and to permit persons to whom the Software is

# furnished to do so, subject to the following conditions:

#

# The above copyright notice and this permission notice shall be included in all

# copies or substantial portions of the Software.

#

# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR

# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,

# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE

# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER

# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,

# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE

# SOFTWARE.

############################################################

#                                                          #

#            HOW TO: Firejailed Mullvad Browser            #

#  https://github.com/samsapti/firejailed-mullvad-browser  #

#                                                          #

############################################################

# Report any issues at

#  <https://github.com/samsapti/firejailed-mullvad-browser/issues/new>

# Persistent local customizations

include firejailed-mullvad-browser.local

# If you use X11:

#include firejailed-mullvad-browser-x11.inc

# If you use pulseaudio:

#ignore machine-id

#noblacklist /etc

#private-etc machine-id

ignore noexec ${HOME}

noblacklist ${HOME}/.firejailed-mullvad-browser

include allow-bin-sh.inc

# /etc breaks network connectivity

# TODO: Determine which files in /etc are needed by MB

#blacklist /etc

blacklist /opt

blacklist /srv

blacklist /sys

blacklist /usr/games

blacklist /usr/libexec

blacklist /usr/local

blacklist /usr/src

blacklist /var

include disable-common.inc

include disable-devel.inc

include disable-exec.inc

include disable-interpreters.inc

include disable-proc.inc

include disable-programs.inc

include disable-shell.inc

include disable-X11.inc

include disable-xdg.inc

whitelist /run/user

whitelist ${RUNUSER}/pulse/native

whitelist ${RUNUSER}/wayland-0

whitelist /usr/share/glib-2.0/schemas/gschemas.compiled

whitelist /usr/share/icons/Adwaita

whitelist /usr/share/mime/magic

whitelist /usr/share/misc/magic

whitelist /usr/share/X11/xkb

caps.drop all

hostname host

ipc-namespace

machine-id

netfilter

# Disable hardware acceleration

#no3d

nodvd

nogroups

noinput

nonewprivs

noroot

# Disable sound, enable if you don't need

#nosound

notv

nou2f

novideo

protocol unix,inet,inet6

seccomp !chroot,!set_mempolicy,@memlock,@setuid,@timer,io_pgetevents

seccomp.block-secondary

seccomp-error-action kill

disable-mnt

private ${HOME}/.firejailed-mullvad-browser

private-bin bash,dirname,env,expr,file,getconf,grep,rm,sh

private-cache

private-dev

private-tmp

dbus-user none

dbus-system none

env GTK_THEME=Adwaita

env MOZ_ENABLE_WAYLAND=1

name firejailed-mullvad-browser

read-only ${HOME}

read-write ${HOME}/Browser

read-write ${HOME}/Data

read-write ${HOME}/UpdateInfo

***mati75*** · 08-10-2023, 21:35

0

Poprawne jest

Kod:
whitelist /home/userd/Pobrane

cyberpunk · 08-10-2023, 22:16

0

(08-10-2023, 21:35)mati75 napisał(a): Poprawne jest

Kod:
whitelist /home/userd/Pobrane

Dodałem do profilu Firejail i nadal nie mam dostępu.

Xvistak · 08-10-2023, 22:46

0

(08-10-2023, 19:17)cyberpunk napisał(a): Mullvad Browser zainstalowałem tak: https://github.com/samsapti/firejailed-mullvad-browser
Firejail działa prawidłowo, czyli blokuje dostęp do wszystkiego poza katalogiem przeglądarki.
Chciałbym mieć dostęp do /home/userd/Pobrane

Dodawałem do firejailed-mullvad-browser.profile

Kod:
noblacklist ${HOME}/userd/Pobrane noblacklist /home/userd/Pobrane whitelist ~/Pobrane whitelist ~/home/userd/Pobrane
Bez rezultatu. Będę wdzięczny za pomoc.
Profil Firejail:

Kod:
# vim: ft=firejail # Copyright © 2019-2023 rusty-snake and contributors, 2023 Sam A. and contributors # # Permission is hereby granted, free of charge, to any person obtaining a copy # of this software and associated documentation files (the "Software"), to deal # in the Software without restriction, including without limitation the rights # to use, copy, modify, merge, publish, distribute, sublicense, and/or sell # copies of the Software, and to permit persons to whom the Software is # furnished to do so, subject to the following conditions: # # The above copyright notice and this permission notice shall be included in all # copies or substantial portions of the Software. # # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR # IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, # FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE # AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER # LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, # OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE # SOFTWARE. ############################################################ # # # HOW TO: Firejailed Mullvad Browser # # https://github.com/samsapti/firejailed-mullvad-browser # # # ############################################################ # Report any issues at # <https://github.com/samsapti/firejailed-mullvad-browser/issues/new> # Persistent local customizations include firejailed-mullvad-browser.local # If you use X11: #include firejailed-mullvad-browser-x11.inc # If you use pulseaudio: #ignore machine-id #noblacklist /etc #private-etc machine-id ignore noexec ${HOME} noblacklist ${HOME}/.firejailed-mullvad-browser include allow-bin-sh.inc # /etc breaks network connectivity # TODO: Determine which files in /etc are needed by MB #blacklist /etc blacklist /opt blacklist /srv blacklist /sys blacklist /usr/games blacklist /usr/libexec blacklist /usr/local blacklist /usr/src blacklist /var include disable-common.inc include disable-devel.inc include disable-exec.inc include disable-interpreters.inc include disable-proc.inc include disable-programs.inc include disable-shell.inc include disable-X11.inc include disable-xdg.inc whitelist /run/user whitelist ${RUNUSER}/pulse/native whitelist ${RUNUSER}/wayland-0 whitelist /usr/share/glib-2.0/schemas/gschemas.compiled whitelist /usr/share/icons/Adwaita whitelist /usr/share/mime/magic whitelist /usr/share/misc/magic whitelist /usr/share/X11/xkb caps.drop all hostname host ipc-namespace machine-id netfilter # Disable hardware acceleration #no3d nodvd nogroups noinput nonewprivs noroot # Disable sound, enable if you don't need #nosound notv nou2f novideo protocol unix,inet,inet6 seccomp !chroot,!set_mempolicy,@memlock,@setuid,@timer,io_pgetevents seccomp.block-secondary seccomp-error-action kill disable-mnt private ${HOME}/.firejailed-mullvad-browser private-bin bash,dirname,env,expr,file,getconf,grep,rm,sh private-cache private-dev private-tmp dbus-user none dbus-system none env GTK_THEME=Adwaita env MOZ_ENABLE_WAYLAND=1 name firejailed-mullvad-browser read-only ${HOME} read-write ${HOME}/Browser read-write ${HOME}/Data read-write ${HOME}/UpdateInfo

read-write ${HOME}/Pobrane
read-write ${HOME}/User/Pobrane
Może tak dopisz Zapis/Odczyt do tego katalogu,co to wogole jest za wynalazek,Pierwsze widzę.Ale bym od tego zaczoł,w szkole wykładziny czy co skoro chcesz se zablokować do takich trywialnych rzecze dostęp ..Jak coś chcesz schować przenieś do chmury,albo na inny nośnik.Po co cudować

Ps.Pytaj Bezpośrednio autora na GitHubie co to wymyslil

cyberpunk · (Ten post był ostatnio modyfikowany: 08-10-2023, 23:36 przez cyberpunk.)

0

(08-10-2023, 22:46)Xvistak napisał(a): read-write ${HOME}/Pobrane
read-write ${HOME}/User/Pobrane

Te wpisy nic nie zmieniły.

Mullvad Browser to Tor Browser bez usługi onion. Wygląda że jako Home traktuje swój główny katalog, nie systemowy Home. Moim zdaniem to najlepsza przeglądarka pod względem prywatności i wygody. Chcę jej używać jako podstawowej i wolałbym w Firejailu. Tak wygląda start:

Kod:
userd@computer:~$ firejail --profile=firejailed-mullvad-browser "$HOME/Browser/start-mullvad-browser" 

Reading profile /home/userd/.config/firejail/firejailed-mullvad-browser.profile

Reading profile /home/userd/.config/firejail/firejailed-mullvad-browser.local

Reading profile /home/userd/.config/firejail/firejailed-mullvad-browser-x11.inc

Reading profile /etc/firejail/whitelist-runuser-common.inc

Reading profile /etc/firejail/allow-bin-sh.inc

Reading profile /etc/firejail/disable-common.inc

Reading profile /etc/firejail/disable-devel.inc

Reading profile /etc/firejail/disable-exec.inc

Reading profile /etc/firejail/disable-interpreters.inc

Reading profile /etc/firejail/disable-proc.inc

Reading profile /etc/firejail/disable-programs.inc

Reading profile /home/userd/.config/firejail/disable-programs.local

Reading profile /etc/firejail/disable-shell.inc

Reading profile /etc/firejail/disable-xdg.inc

Warning: networking feature is disabled in Firejail configuration file

Seccomp list in: !chroot,!set_mempolicy,@memlock,@setuid,@timer,io_pgetevents, check list: @default-keep, prelist: unknown,unknown,mlock,mlock2,mlockall,munlock,munlockall,setgid,setgroups,setregid,setresgid,setresuid,setreuid,setuid,alarm,getitimer,setitimer,timer_create,timer_delete,timer_getoverrun,timer_gettime,timer_settime,timerfd_create,timerfd_gettime,timerfd_settime,times,io_pgetevents,

Parent pid 2373, child pid 2374

10 programs installed in 19.28 ms

Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.

Warning: not remounting /run/user/1000/gvfs

Warning: not remounting /run/user/1000/doc

Warning: not mounting tmpfs on /home/userd/.config/pulse

Seccomp list in: !chroot,!set_mempolicy,@memlock,@setuid,@timer,io_pgetevents, check list: @default-keep, prelist: unknown,unknown,mlock,mlock2,mlockall,munlock,munlockall,setgid,setgroups,setregid,setresgid,setresuid,setreuid,setuid,alarm,getitimer,setitimer,timer_create,timer_delete,timer_getoverrun,timer_gettime,timer_settime,timerfd_create,timerfd_gettime,timerfd_settime,times,io_pgetevents,

Warning: cleaning all supplementary groups

Child process initialized in 123.42 ms

/home/userd/Browser/start-mullvad-browser: line 85: id: command not found

/home/userd/Browser/start-mullvad-browser: line 85: [: : integer expression expected

Zaloguj się
Login:
Hasło:	Nie pamiętam hasła
	Zapamiętaj mnie