We have moved to a new Sailfish OS Forum. Please start new discussions there.
1

firejail or the like?

asked 2018-11-24 11:00:34 +0300

OdeToJoy gravatar image

How is it possible to install firejail?

edit retag flag offensive close delete

Comments

1

More details can be handy for those that can help u. Wich phone and so etc build nr, android app?

aQUICK1 ( 2018-11-24 12:05:37 +0300 )edit

I use: twrp-3.1.1-2-oneplus3t.img OnePlus3T_Beta19-(30-11-17)-FIRMWARE-flashable.zip lineage-14.1-20180227-UNOFFICIAL-oneplus3.zip sailfishos-oneplus3-release-3.0.0.8-devel-20181109.zip OnePlus3T EU version 3.0.0.8 (Lemmenjoki)

I don't use android apps, and no openrepos things. I don't know, if it is secure.

OdeToJoy ( 2018-11-24 17:02:08 +0300 )edit

1 Answer

Sort by » oldest newest most voted
2

answered 2018-11-25 13:59:13 +0300

Nieldk gravatar image

Perhaps this is what you need ?

https://build.merproject.org/package/show/home:nielnielsen/firejail

edit flag offensive delete publish link more

Comments

Thank you for the file.

But there appears an error.

I installed "firejail-0.9.38-1.14.12.jolla.armv7hl.rpm".

If I run the command "firejail sailfish-browser" in the terminal as user, then I get the message:

Reading profile /etc/firejail/generic/generic.profile

Reading profile /etc/firejail/generic/disable-mgmt.inc

Reading profile /etc/firejail/generic/disable-secret.inc

Reading profile /etc/firejail/generic/disable-common.inc

Error: line 13 in /etc/firejail/generic.profile is invalid

If I run the command "firejail sailfish-browser" as root, then this appears:

Reading profile /etc/firejail/server.profile

Reading profile /etc/firejail/disable-mgmt.inc

Note: you can use --noprofile to disable server.profile

Error clone:main(1471): Invalid argument

OdeToJoy ( 2018-11-25 18:45:44 +0300 )edit

firejail --noprofile sailfish-browser

Nieldk ( 2018-11-25 19:06:17 +0300 )edit

When I write "firejail --noprofile sailfish-browser" as normal user as well as root user in both cases there comes the message:

Error clone:main(1471): Invalid argument

OdeToJoy ( 2018-11-25 21:45:09 +0300 )edit

Ah, I made a new build please remove installed version

devel-su
zypper rm firejail
rm -rf /etc/firejail

and then install new version i just build

https://build.merproject.org/package/show/home:nielnielsen/firejail

Then you can start with

firejail sailfish-browser
Nieldk ( 2018-11-25 22:03:15 +0300 )edit

as user or root, with or without --noprofile always the same error:

Error clone:main(1471): Invalid argument.

But as user and without --noprofile:

"firejail sailfish-browser"

there comes also the message:

Warning: user namespaces not available in the current kernel

OdeToJoy ( 2018-11-25 22:26:21 +0300 )edit

Cant reproduce here. (Sailfish X official) What device are you using ?

Nieldk ( 2018-11-25 22:36:17 +0300 )edit

I use:

twrp-3.1.1-2-oneplus3t.img

OnePlus3T_Beta19-(30-11-17)-FIRMWARE-flashable.zip

lineage-14.1-20180227-UNOFFICIAL-oneplus3.zip

sailfishos-oneplus3-release-3.0.0.8-devel-20181109.zip

OnePlus3T EU version

3.0.0.8 (Lemmenjoki)

OdeToJoy ( 2018-11-25 22:37:48 +0300 )edit

Best guess is missing name-space configs in the kernel:

CONFIG_NAMESPACES=y
CONFIG_UTS_NS=y
CONFIG_IPC_NS=y
CONFIG_USER_NS=y
CONFIG_PID_NS=y
CONFIG_NET_NS=y

CONFIG_HAVE_ARCH_SECCOMP_FILTER=y
CONFIG_SECCOMP_FILTER=y
Nieldk ( 2018-11-26 07:01:28 +0300 )edit

Alos, if you didnt, install sudo from my repository. Might help.

Nieldk ( 2018-11-26 07:03:34 +0300 )edit

Thanks again Nieldk.

I have installed sudo.

I think I have to insert into the terminal

devel-su

and the password

and then these 8 lines.

Am I right?

OdeToJoy ( 2018-11-26 07:20:44 +0300 )edit

I have found a file "kernel-3.18.31-delaya73_11_3-g5c8e668".

I will try to look into it.

OdeToJoy ( 2018-11-26 07:37:58 +0300 )edit
Login/Signup to Answer

Question tools

Follow
2 followers

Stats

Asked: 2018-11-24 11:00:34 +0300

Seen: 409 times

Last updated: Nov 25 '18