diff options
author | Kelvin M. Klann <kmk3.code@protonmail.com> | 2022-02-06 23:51:20 -0300 |
---|---|---|
committer | Kelvin M. Klann <kmk3.code@protonmail.com> | 2022-02-07 17:14:09 -0300 |
commit | f8060a0612537d7d7af6ff0fd50782f7dcf509c7 (patch) | |
tree | 6829cc5f10c125609b57455ab8419429035ef6cf | |
parent | keepass*: fix typo in private-dev note (diff) | |
download | firejail-f8060a0612537d7d7af6ff0fd50782f7dcf509c7.tar.gz firejail-f8060a0612537d7d7af6ff0fd50782f7dcf509c7.tar.zst firejail-f8060a0612537d7d7af6ff0fd50782f7dcf509c7.zip |
keepassx: restore nou2f
I could not find anything to confirm that keepassx supports hardware
keys. And as mentioned by @rusty-snake[1]:
> The yubikey support in kpxc seems to be based on
> https://github.com/kylemanna/keepassx /
> https://github.com/keepassx/keepassx/pull/52
> which was never merged. For me it looks like kpx never got official
> support for it.
>
> keepass seems to support hw keys (via plugin).
Also of note is the PR that added yubikey support to keepassxc:
https://github.com/keepassxreboot/keepassxc/pull/127
This partially reverts commit 09ac1a73e ("keepass*: remove nou2f",
2022-02-05) / PR #4903. See also commit 91b04172b ("keepass*: fix typo
in private-dev note", 2022-02-06).
Closes #4883.
[1] https://github.com/netblue30/firejail/issues/4883#issuecomment-1031172309
-rw-r--r-- | etc/profile-a-l/keepassx.profile | 4 |
1 files changed, 1 insertions, 3 deletions
diff --git a/etc/profile-a-l/keepassx.profile b/etc/profile-a-l/keepassx.profile index 4fec072df..5e2d6d8df 100644 --- a/etc/profile-a-l/keepassx.profile +++ b/etc/profile-a-l/keepassx.profile | |||
@@ -32,6 +32,7 @@ nonewprivs | |||
32 | noroot | 32 | noroot |
33 | nosound | 33 | nosound |
34 | notv | 34 | notv |
35 | nou2f | ||
35 | novideo | 36 | novideo |
36 | protocol unix | 37 | protocol unix |
37 | seccomp | 38 | seccomp |
@@ -39,9 +40,6 @@ shell none | |||
39 | tracelog | 40 | tracelog |
40 | 41 | ||
41 | private-bin keepassx,keepassx2 | 42 | private-bin keepassx,keepassx2 |
42 | # Note: private-dev prevents the program from seeing new devices (such as | ||
43 | # hardware keys) on /dev after it has already started; add "ignore private-dev" | ||
44 | # to keepassxc.local if this is an issue (see #4883). | ||
45 | private-dev | 43 | private-dev |
46 | private-etc alternatives,fonts,ld.so.cache,ld.so.preload,machine-id | 44 | private-etc alternatives,fonts,ld.so.cache,ld.so.preload,machine-id |
47 | private-tmp | 45 | private-tmp |