From 867c2bcbfbce38e917191023e65bae6102a81430 Mon Sep 17 00:00:00 2001
From: Vincent43 <31109921+Vincent43@users.noreply.github.com>
Date: Sat, 15 Jun 2019 12:05:48 +0000
Subject: chromium: disable nodbus

Unfortunately nodbus prevents access to site passwords if they are stored in GNOME Keyring[1]. According to docs chromium can store password in 3 different ways:
GNOME Keyring
KWallet 4
plain text

As KWallet storage may be broken in a same way, using nodbus will force chromium to store passwords in plain text which isn't best option for security and for firejail default.

[1] https://wiki.gnome.org/Projects/GnomeKeyring
[2] https://chromium.googlesource.com/chromium/src.git/+/master/docs/linux_password_storage.md
---
 etc/chromium-common.profile | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

(limited to 'etc')

diff --git a/etc/chromium-common.profile b/etc/chromium-common.profile
index 63983d93b..b64fc820a 100644
--- a/etc/chromium-common.profile
+++ b/etc/chromium-common.profile
@@ -29,8 +29,7 @@ include whitelist-var-common.inc
 apparmor
 caps.keep sys_chroot,sys_admin
 netfilter
-# Breaks Gnome connector - disable if you use that
-nodbus
+# nodbus - prevents access to passwords saved in GNOME Keyring, also breaks Gnome connector
 nodvd
 nogroups
 notv
-- 
cgit v1.2.3-54-g00ecf