ParrotOS's Firejail Code

[phabricator-migrator]

Information

ID: 804
PHID: PHID-TASK-jyxuysgqotxr54ayw2xv
Author: HulaHoop
Status at Migration Time: open
Priority at Migration Time: Normal

Description

ParrotOS have made a lot of progress in making firejail a general usable solution out of the box while supporting a ton of programs and surviving upgrades. This ticket is for taking advantage of their code and merging it in our distro.

install firejail firetools by default

related: http://forums.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/t/phabricator-login-error/5370

Check Parrot OS sandboxing code

Thanks for your pointer @nurmagoz. Good find.

firejail / seccomp / More Options for Program Containment

Hi @nurmagoz Yes I know it works, but it defaults to a “default profile” in that mode (which is not very restrictive). We really need something to auto-select the Tor Browser profile for improved usability and stricter containment if Firejail is used.

Comments

---

TNTBOMBOM

2018-10-13 17:01:01 UTC

@HulaHoop that doesnt mean we dont install firejail by default.

with or without parrot profiles. because firejail by default it has their own profiles.

---

TNTBOMBOM

2018-10-26 07:21:10 UTC

firejail is enough for Whonix-GW
firejail + firetools for Whonix-WS

---

HulaHoop

2018-10-28 03:49:03 UTC

I disagree. Firetools makes administration easier and has a place on both VMs.

---

TNTBOMBOM

2018-10-28 05:36:31 UTC

No problem, but needs to add the commands manually to firetools in the GW.

as Firetools doesnt has the graphical icons for non-graphical programs e.g Tor. (and even some graphical programs e.g Tor Browser).

needs some extra steps , but hope no big deal.