opera fixes (#5041)

* opera fixes

* disable-common.inc: add blacklist /usr/lib/opera/opera_sandbox

2 files changed, 12 insertions, 0 deletions

diff --git a/etc/inc/disable-common.inc b/etc/inc/disable-common.inc
index 32f4cb81f..080a7f3a1 100644
--- a/etc/inc/disable-common.inc
+++ b/etc/inc/disable-common.inc
@@ -512,6 +512,7 @@ blacklist /usr/lib/policykit-1/polkit-agent-helper-1
 blacklist /usr/lib/dbus-1.0/dbus-daemon-launch-helper
 blacklist /usr/lib/eject/dmcrypt-get-device
 blacklist /usr/lib/chromium/chrome-sandbox
+blacklist /usr/lib/opera/opera_sandbox
 blacklist /usr/lib/vmware
 blacklist ${PATH}/suexec
 blacklist /usr/lib/squid/basic_pam_auth
diff --git a/etc/profile-m-z/opera.profile b/etc/profile-m-z/opera.profile
index b342b3961..e52e9294d 100644
--- a/etc/profile-m-z/opera.profile
+++ b/etc/profile-m-z/opera.profile
@@ -17,5 +17,16 @@ whitelist ${HOME}/.cache/opera
 whitelist ${HOME}/.config/opera
 whitelist ${HOME}/.opera
 
+# https://github.com/netblue30/firejail/issues/4965
+ignore whitelist /usr/share/mozilla/extensions
+ignore whitelist /usr/share/webext
+
+# opera uses opera_sandbox instead of chrome-sandbox
+noblacklist /usr/lib/opera/opera_sandbox
+ignore noblacklist /usr/lib/chromium/chrome-sandbox
+
+# Add the below to your opera.local if you want to disable auto update
+#env OPERA_AUTOUPDATE_DISABLED=1
+
 # Redirect
 include chromium-common.profile