Received: from w4.tutanota.de (w4.tutanota.de [81.3.6.165]) by nld3-dev1.alpinelinux.org (Postfix) with ESMTPS id 31CE6782CE9 for <~alpine/users@lists.alpinelinux.org>; Mon, 19 Jul 2021 16:52:46 +0000 (UTC) Received: from w3.tutanota.de (unknown [192.168.1.164]) by w4.tutanota.de (Postfix) with ESMTP id 76C461060140; Mon, 19 Jul 2021 16:52:46 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1626713566; s=s1; d=keemail.me; h=From:From:To:To:Subject:Subject:Content-Description:Content-ID:Content-Type:Content-Type:Content-Transfer-Encoding:Cc:Cc:Date:Date:In-Reply-To:In-Reply-To:MIME-Version:MIME-Version:Message-ID:Message-ID:Reply-To:References:References:Sender; bh=aaAEMmG7yBdr3zhSY2On0QdWUHvHsHqZY3D8sEzBE7s=; b=r9m4bG7RjZ66K3eSo6VhKAlMUYpcD1mQWdDv5FaxCuzMNXY+FjVI+baZFh2oVkBI mIy/4ExM5Oz/hFr/IqTAKEeQz9TatmqBfnAijevVeKi0fc5JbLWOqq48owaxuhMoqUQ uJtrwvd4w2mmDYk5gVD4k0fy8M8pULeoXNbcQ6TGfEVVmGIEWKDsf4xeUAFYVevOkjL Dx0alz2FTzLnbgQOIc84f2GyJA3ID5BF/kKOmAzNx1chlbgwbd7ep9yxJkjtgcGgdFc Sv6urA9VuQLVgU0IPBwQhbEbcf8PTkUSliIum+KcH98jf8Ell1sIM6yl9C55Uk/5HdJ IkV8TtCLvQ== Date: Mon, 19 Jul 2021 18:52:46 +0200 (CEST) From: ml-devel@keemail.me To: ~alpine/users <~alpine/users@lists.alpinelinux.org> Cc: ariadne@dereferenced.org Message-ID: In-Reply-To: <5eec4fc-291d-1aae-dac-4776cba0945b@dereferenced.org> References: <87c4c1c0-f20-3f9-2a6-a85c9a4b2133@dereferenced.org> <5eec4fc-291d-1aae-dac-4776cba0945b@dereferenced.org> Subject: Re: Firejail MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_143190_1477034296.1626713566443" ------=_Part_143190_1477034296.1626713566443 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Do you know how to write Firejail's `firejail --private executable` equivalent for Bubblewrap? I never use my browser to access/upload files from my local filesystem, so I don't see why it should have access to them. I tried looking it up, but `bubblewrap` seems much more complicated than Firejail. I haven't yet wrapped my head around it. ------=_Part_143190_1477034296.1626713566443 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit
Do you know how to write Firejail's `firejail --private executable` equivalent for Bubblewrap? I never use my browser to access/upload files from my local filesystem, so I don't see why it should have access to them.

I tried looking it up, but `bubblewrap` seems much more complicated than Firejail. I haven't yet wrapped my head around it.
------=_Part_143190_1477034296.1626713566443--