From b1fde55fce290d5e8920b2da736af67c2814c97c Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Mon, 14 Mar 2022 18:13:21 +0000 Subject: opera fixes (#5041) * opera fixes * disable-common.inc: add blacklist /usr/lib/opera/opera_sandbox --- etc/inc/disable-common.inc | 1 + etc/profile-m-z/opera.profile | 11 +++++++++++ 2 files changed, 12 insertions(+) diff --git a/etc/inc/disable-common.inc b/etc/inc/disable-common.inc index 32f4cb81f..080a7f3a1 100644 --- a/etc/inc/disable-common.inc +++ b/etc/inc/disable-common.inc @@ -512,6 +512,7 @@ blacklist /usr/lib/policykit-1/polkit-agent-helper-1 blacklist /usr/lib/dbus-1.0/dbus-daemon-launch-helper blacklist /usr/lib/eject/dmcrypt-get-device blacklist /usr/lib/chromium/chrome-sandbox +blacklist /usr/lib/opera/opera_sandbox blacklist /usr/lib/vmware blacklist ${PATH}/suexec blacklist /usr/lib/squid/basic_pam_auth diff --git a/etc/profile-m-z/opera.profile b/etc/profile-m-z/opera.profile index b342b3961..e52e9294d 100644 --- a/etc/profile-m-z/opera.profile +++ b/etc/profile-m-z/opera.profile @@ -17,5 +17,16 @@ whitelist ${HOME}/.cache/opera whitelist ${HOME}/.config/opera whitelist ${HOME}/.opera +# https://github.com/netblue30/firejail/issues/4965 +ignore whitelist /usr/share/mozilla/extensions +ignore whitelist /usr/share/webext + +# opera uses opera_sandbox instead of chrome-sandbox +noblacklist /usr/lib/opera/opera_sandbox +ignore noblacklist /usr/lib/chromium/chrome-sandbox + +# Add the below to your opera.local if you want to disable auto update +#env OPERA_AUTOUPDATE_DISABLED=1 + # Redirect include chromium-common.profile -- cgit v1.2.3-54-g00ecf