Remove apulse from default config

This commit is contained in:
valoq 2022-03-12 13:48:30 +01:00
parent 5a91c9e587
commit 6c4c091ab5
No known key found for this signature in database
GPG Key ID: 19F09A0FB865CBD8
1 changed files with 5 additions and 3 deletions

View File

@ -2,7 +2,6 @@
set -euo pipefail
(
exec bwrap \
--ro-bind /usr/bin/apulse /usr/bin/apulse \
--ro-bind /usr/bin/sh /usr/bin/sh \
--ro-bind /usr/share /usr/share/ \
--ro-bind /usr/lib /usr/lib \
@ -43,11 +42,14 @@ set -euo pipefail
--new-session \
--seccomp 10 \
10< /usr/local/bin/seccomp_default_filter.bpf \
apulse /usr/lib/firefox/firefox
/usr/lib/firefox/firefox
)
# note: running firefox on wayland like this should make a complete sandbox
# note: For the sandbox to be effective, run on wayland environments only (instead of X11)
# in case firefox was build without the --enable-alsa flag, change to script to run with apulse like this:
# --ro-bind /usr/bin/apulse /usr/bin/apulse \
# apulse /usr/lib/firefox/firefox
# -ro-bind /etc/alsa /etc/alsa \