From d8e01fe62f8c5910b23411acbe42e5447846b3f8 Mon Sep 17 00:00:00 2001 From: Victor Lavaud Date: Sat, 22 Jun 2024 16:06:58 +0200 Subject: [PATCH] Add comment to include `noblacklist ${RUNUSER}/app` in browser profiles KeePassXC browser extension look for KeePassXC in the /run/user/app directory (https://github.com/keepassxreboot/keepassxc/blob/6b1ab1a5edd66ac10706a2fb5af34ec9458a901d/src/browser/BrowserShared.cpp\#L41). Unfortunately, /run/user/app seems to be blacklisted in disable-common.inc under the flatpak section (https://github.com/netblue30/firejail/blob/b89ec818926b4bcd3a58bb4e2a67b68a8090ba1c/etc/inc/disable-common.inc\#L667), as a result, KeePassXC extension cannot connect to it. --- etc/profile-a-l/chromium-common.profile | 6 ++++++ etc/profile-a-l/firefox.profile | 1 + 2 files changed, 7 insertions(+) diff --git a/etc/profile-a-l/chromium-common.profile b/etc/profile-a-l/chromium-common.profile index 37bfa0bfea8..02613b72858 100644 --- a/etc/profile-a-l/chromium-common.profile +++ b/etc/profile-a-l/chromium-common.profile @@ -46,5 +46,11 @@ blacklist ${PATH}/wget2 # The file dialog needs to work without d-bus. ?HAS_NODBUS: env NO_CHROME_KDE_FILE_DIALOG=1 +# Add one of the following whitelist options to your chromium-common.local to enable KeePassXC Plugin support. +# Note: Start KeePassXC before chromium or google-chrome and keep it open to allow communication between them. +#whitelist ${RUNUSER}/kpxc_server +#whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer +#noblacklist ${RUNUSER}/app + # Redirect include blink-common.profile diff --git a/etc/profile-a-l/firefox.profile b/etc/profile-a-l/firefox.profile index 009a0d11969..ea6e4e6735a 100644 --- a/etc/profile-a-l/firefox.profile +++ b/etc/profile-a-l/firefox.profile @@ -33,6 +33,7 @@ whitelist ${HOME}/.mozilla # Note: Start KeePassXC before Firefox and keep it open to allow communication between them. #whitelist ${RUNUSER}/kpxc_server #whitelist ${RUNUSER}/org.keepassxc.KeePassXC.BrowserServer +#noblacklist ${RUNUSER}/app whitelist /usr/share/firefox whitelist /usr/share/gnome-shell/search-providers/firefox-search-provider.ini