aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l/chromium-common.profile
diff options
context:
space:
mode:
authorLibravatar Albin Kauffmann <albin@kauff.org>2021-02-09 18:58:59 +0100
committerLibravatar Albin Kauffmann <albin@kauff.org>2021-02-09 19:57:12 +0100
commit8ad2807297882e308da71f87fa2923f8fbdfd0cd (patch)
tree55753807b29407a258c7747c561bb1102ee17546 /etc/profile-a-l/chromium-common.profile
parentRevert "etc: use ${DOCUMENTS} macro where appropriate" (diff)
downloadfirejail-8ad2807297882e308da71f87fa2923f8fbdfd0cd.tar.gz
firejail-8ad2807297882e308da71f87fa2923f8fbdfd0cd.tar.zst
firejail-8ad2807297882e308da71f87fa2923f8fbdfd0cd.zip
Add a comment to some profiles to allow screen sharing
This configuration is to be applied in order to get screen sharing working under Wayland (via pipewire and a xdg-desktop-portal backend). Note that {chrome|chromium} does not need the dbus filters (at least as of today) because dbus filtering is not enabled (dbus-user not set to none).
Diffstat (limited to 'etc/profile-a-l/chromium-common.profile')
-rw-r--r--etc/profile-a-l/chromium-common.profile3
1 files changed, 3 insertions, 0 deletions
diff --git a/etc/profile-a-l/chromium-common.profile b/etc/profile-a-l/chromium-common.profile
index ce9c652c6..996e00912 100644
--- a/etc/profile-a-l/chromium-common.profile
+++ b/etc/profile-a-l/chromium-common.profile
@@ -34,6 +34,9 @@ include whitelist-var-common.inc
34# if your kernel allows unprivileged userns clone. 34# if your kernel allows unprivileged userns clone.
35#include chromium-common-hardened.inc 35#include chromium-common-hardened.inc
36 36
37# Uncomment or put in your chromium-common.local to allow screen sharing under wayland.
38#whitelist ${RUNUSER}/pipewire-0
39
37apparmor 40apparmor
38caps.keep sys_admin,sys_chroot 41caps.keep sys_admin,sys_chroot
39netfilter 42netfilter