Sample Header Ad - 728x90

Firejail not hiding files with Brave browser

1 vote
1 answer
1097 views
If I run the following:
firejail brave-browser
And then try and access files in the browser (such as when uploading a file), Brave still has access to my entire home folder. Usually this doesn't happen with Firejail. I've tried it with Firefox, and it only gives access to the ~/Downloads folder. I've verified Firejail is running with firejail --list:
18974:daniel::firejail /usr/bin/brave-browser-stable
So I'm not sure what the problem is. The exact same command works with Firefox, so why isn't it hiding files with Brave? ## Environment * OS: Pop!_OS 21.04 * GNOME version: 3.38.5 * Brave browser: v1.29.81 (installed with apt) ## Environment ### /etc/firejail/brave.profile
# Firejail profile for brave
# Description: Web browser that blocks ads and trackers by default.
# This file is overwritten after every install/update
# Persistent local customizations
include brave.local
# Persistent global definitions
include globals.local

# noexec /tmp is included in chromium-common.profile and breaks Brave
ignore noexec /tmp
# TOR is installed in ${HOME}
ignore noexec ${HOME}

noblacklist ${HOME}/.cache/BraveSoftware
noblacklist ${HOME}/.config/BraveSoftware
noblacklist ${HOME}/.config/brave
noblacklist ${HOME}/.config/brave-flags.conf
# brave uses gpg for built-in password manager
noblacklist ${HOME}/.gnupg

mkdir ${HOME}/.cache/BraveSoftware
mkdir ${HOME}/.config/BraveSoftware
mkdir ${HOME}/.config/brave
whitelist ${HOME}/.cache/BraveSoftware
whitelist ${HOME}/.config/BraveSoftware
whitelist ${HOME}/.config/brave
whitelist ${HOME}/.config/brave-flags.conf
whitelist ${HOME}/.gnupg

# Brave sandbox needs read access to /proc/config.gz
noblacklist /proc/config.gz

# Redirect
include chromium-common.profile
### /etc/firejail/brave-browser.profile
# Firejail profile alias for brave
# This file is overwritten after every install/update

# Persistent local customizations
include brave-browser.local

# Redirect
include brave.profile
Asked by Daniel (143 rep)
Sep 29, 2021, 07:23 AM
Last activity: Oct 2, 2021, 04:45 AM