That's why I advise to limit this isolation to the web browser launcher that's in the panel of your desktop. Also printing web pages might fail because of this. Because for the rest, your web browser is isolated from your personal folder. In today's world of security breaches and privacy concerns, my opinion is: Why would someone not want to use Firejail? (the complete Distrowatch article is here)Įverything has of course its price, even if it's a small one: the disadvantage of this isolation is, that you can for example only add files to an e-mail message if those files are in the Downloads folder.
I fully agree with what Distrowatch has said about Firejail: the extra protection layer that Firejail provides, increases security considerably, uses very few resources and requires almost no effort to use. Because those already have their own sandbox. Note: Firejail can't be used for applications that are installed as Flatpaks or Snaps. The system folders and files are also still accessible, but obviously as "read-only".įirejail is well designed: it causes only a little extra system load. Almost entirely, because there are some useful exceptions, like the Downloads folder and the configuration of the web browser. can't touch anything.īecause your web browser and its plugins, are then isolated from your personal folder. The malware can go ahead without being stopped, but. Firejail protects against malware that tries to do nasty things with your personal files behind your back. With that, you're much better protected against hackers or malware breaking into your personal folder (the files that are accessible without root permissions). Translated into ordinary language that means: you can fully isolate your web browser from your personal folder, so that it can never do any harm in your personal folder. You can easily achieve that protection by means of the application Firejail, which offers simple lightweight virtualization on the application level. Because web browsers (and their plugins) are, by far, the applications that are most under attack. Namely by running your web browser from within a secure virtual sandbox. Yet with a relatively small measure, you can increase the already high level of security of your Linux considerably. By default, Linux Mint is already very secure.
Use Firejail as internet access blocker for individual applicationsġ. Chrome completely in the sandbox (only for advanced users) Check the settings for Chrome and modify them (for advanced users only) Firefox completely in the sandbox (only for advanced users) Check the settings for Firefox and modify them (for advanced users only) Fix a sound issue (PulseAudio) caused by Firejail
0 kommentar(er)
