schulze/nix-config
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

finally fix fucking firejail bs

Browse Source 
needs noblacklist AND whitelist...
This commit is contained in:
Felix Schulze
2025-06-21 15:21:57 +02:00
parent 8ffe52a3ca
commit ec8512746b
1 changed files with 15 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
modules/common.nix
View File

@ -209,8 +209,6 @@
"--ignore=private-dev" "--ignore=private-dev"
# Enable desktop notifications # Enable desktop notifications
"--dbus-user.talk=org.freedesktop.Notifications" "--dbus-user.talk=org.freedesktop.Notifications"
# Allow access to downloads
"--whitelist=/home/schulze/Nextcloud/Home-sync/Downloads"
]; ];
}; };
chromium = { chromium = {
@ -219,6 +217,21 @@
}; };
}; };
}; };
environment.etc = {
"firejail/firefox.local".text = ''
# Custom Firejail profile for firefox
# Allow access to downloads
noblacklist ''${HOME}/Nextcloud
whitelist ''${HOME}/Nextcloud
# Enable native notifications.
dbus-user.talk org.freedesktop.Notifications
# Allow inhibiting screensavers.
dbus-user.talk org.freedesktop.ScreenSaver
# Allow screensharing under Wayland.
dbus-user.talk org.freedesktop.portal.Desktop
'';
};
# ================================ # ================================
# HARDWARE SECURITY (YUBIKEY) # HARDWARE SECURITY (YUBIKEY)