Subject: Re: Firejail
To: ml-devel@keemail.me, ~alpine/users <~alpine/users@lists.alpinelinux.org>
References: <MexPCzM--3-2@keemail.me>
 <87c4c1c0-f20-3f9-2a6-a85c9a4b2133@dereferenced.org>
 <MextMId--3-2@keemail.me>
 <5eec4fc-291d-1aae-dac-4776cba0945b@dereferenced.org>
 <Mezfm_C--3-2@keemail.me>
From: Donoban <donoban@riseup.net>
Message-ID: <015b2e3a-7258-9b2c-cf8e-efdb728ab64f@riseup.net>
Date: Mon, 19 Jul 2021 18:51:35 +0000
MIME-Version: 1.0
In-Reply-To: <Mezfm_C--3-2@keemail.me>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Content-Language: en-US

On 19/7/21 16:52, ml-devel@keemail.me wrote:
> Do you know how to write Firejail's `firejail --private executable` 
> equivalent for Bubblewrap? I never use my browser to access/upload 
> files from my local filesystem, so I don't see why it should have 
> access to them.
>
> I tried looking it up, but `bubblewrap` seems much more complicated 
> than Firejail. I haven't yet wrapped my head around it.

Take a look to bubblejail which is a simpler wrapper for bubblewrap and 
also has a basic GUI, bubbejail-config.

On bubblejail all Instances have their private home (stored in 
~/.local/share/bubblejail/instances/) and then you can mount other 
folders from your real home if needed.


Donoban