Choose style:

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - Bigoeuf

Pages: [1] 2 3 ... 12
1
News and Reviews / Re: Firefox Certificate Issues - Extensions etc
« on: May 08, 2019, 07:25:19 am »
Looks like all fixed now (for me anyway) with latest updates that upgrade to FF 66.0.4 - also confirmed here:

https://www.mozilla.org/en-US/firefox/66.0.4/releasenotes/

Though in the Release Notes it does make this caveat:

Quote
A small number of add-ons may be listed as unsupported or may not appear in about:addons. Their data is not lost; users should be able to re-install the add-ons and recover the data

However FF 66.0.5 has already been release by Mozilla:

https://www.mozilla.org/en-US/firefox/66.0.5/releasenotes/

that comments:

Quote
Fixed    Further improvements to re-enable web extensions which had been disabled for users with a master password set

That will undoubtedly filter down through the Ubunutu/ Pepp Repos in due course  :)


2
News and Reviews / Firefox Certificate Issues - Extensions etc
« on: May 04, 2019, 06:06:34 am »
Morning
Whilst using Firefox just all my extensions suddenly were made 'legacy & no longer supported by Firefox' since then a notice banner appeared when I tried to reinstall the extensions:
Quote
Due to a certificate issue, add-ons are not working and will fail to install. We are currently working on this issue and you can track updates at https://discourse.mozilla.org/t/certificate-issue-causing-add-ons-to-be-disabled-or-fail-to-install/39047/
No fixed as of this moment - hopefully soon
 ;)

3
Networking / Re: intel centrino advanced n6200
« on: February 02, 2019, 12:23:23 am »
Good Morning Bob
Don't want to be speaking out of turn but I don't think you need to install any wifi drivers for Peppermint - certainly from 7 onwards any road - but I stand to be corrected by Mark or any of the inner circle  ;)

I did have a very similar wifi card to yours installed on my Dell E6430 laptop that worked 'out the box' with Pepp 8 on a live USB. I made a copy of the specs at the time:

Code: [Select]
peppermint@peppermint ~ $ inxi -Fz
System:    Host: peppermint Kernel: 4.8.0-53-generic x86_64 (64 bit)
           Desktop: N/A Distro: Peppermint Eight
Machine:   System: Dell (portable) product: Latitude E6430 v: 01
           Mobo: Dell model: 0H3MT5 v: A00 Bios: Dell v: A18 date: 01/18/2016
CPU:       Quad core Intel Core i7-3720QM (-HT-MCP-) cache: 6144 KB
           clock speeds: max: 3600 MHz 1: 1623 MHz 2: 1200 MHz 3: 1199 MHz
           4: 3400 MHz 5: 2599 MHz 6: 1202 MHz 7: 1199 MHz 8: 1289 MHz
Graphics:  Card-1: Intel 3rd Gen Core processor Graphics Controller
           Card-2: NVIDIA GF108GLM [NVS 5200M]
           Display Server: X.Org 1.18.4 drivers: (unloaded: fbdev,vesa) FAILED: nouveau
           Resolution: 1600x900@59.99hz
           GLX Renderer: Mesa DRI Intel Ivybridge Mobile
           GLX Version: 3.0 Mesa 17.0.2
Audio:     Card Intel 7 Series/C210 Series Family High Definition Audio Controller
           driver: snd_hda_intel
           Sound: Advanced Linux Sound Architecture v: k4.8.0-53-generic
Network:   Card-1: Intel 82579LM Gigabit Network Connection driver: e1000e
           IF: eno1 state: down mac: <filter>
           Card-2: Intel Centrino Ultimate-N 6300 driver: iwlwifi
           IF: wlp3s0 state: down mac: <filter>

Note the second to last line where it shows the Intel wifi card with the iwlwif driver.

Are you sure you have got the wifi card enabled? - apparently there is both a  there is a hardware & a software wireless switch on these laptops - look here:

https://ccit.college.columbia.edu/knowledgebase/article/how-manage-wireless-lenovo-laptops

From what I've seen I believe your hardware wireless switch is on the right side edge right near the front on your laptop

HTH  :)

4
Software & Applications / Re: How do you run Bluetooth anyway?
« on: January 19, 2019, 06:23:53 pm »
Evening Mynaardt - mi old colonial cousin & A Happy New Year to you

This maybe of some assistance:

This is your wifi card:

https://www.intel.com/content/dam/www/public/us/en/documents/product-briefs/centrino-advanced-n-6205-brief.pdf

Note: No Bluetooth


You could replace it with:

https://www.intel.com/content/dam/www/public/us/en/documents/product-briefs/centrino-advanced-n-6235-brief.pdf

Note: Bluetooth - Its an upgraded card in the same series so I can't see why it won't work


A quick search turned up this:

https://www.amazon.ca/Centrino-Advanced-N-6235-5ghz-920119/dp/B007QXLIWI/ref=sr_1_1?keywords=centrino-6235&qid=1547939159&sr=8-1

Note: This is not me recommending or advocating you buy from this seller it is purely an example - I'll leave you to research that.

You may wish to upgrade to a higher spec wifi card that is capable of communicating using the latest AC standard (which I have done - though it is of no use to me with my home router as it is not of that same standard) which maybe of similar cost as the N standard one. You may need to check with Lenovo about whats available & compatibility.


Youtube video showing how to access wifi card for replacement:



1. Remove battery
2. Remove back center access panel

See wifi card next to SODIMM (RAM)

3. Remove wifi card (as shown - I would use plastic utensils though)
4. Reverse procedure - hopefully job done

Seems simple as you like. I've done various hardware mods/upgrades to my Dell Laptops (CPU's, SSD/HDD, RAM, Wifi Card, Keyboard, daughter board) some of which have been considerably more involved & with one exception (E6430 speakers which maybe a motherboard fault) everything has been upgraded satisfactorily.

HTH & Good luck  ;)

5
Hardware / Re: Dell Latitude 6430 - Speakers
« on: August 30, 2018, 09:30:12 am »
Blimey funny you should mention that - I haven't had any overheating problems yet but I was well aware that the replacement CPU went from 31w (the previous TL-50) to 35w. I bought some half decent thermal paste Arctic MX-4 instead of the distinctly average Startech stuff I had been using.
I also made up a little launcher to call:

Code: [Select]
watch -n 1 sensors

It dynamically monitors the sensors in my case  just the CPU.

I periodically look at my CPU temp as & when - here it is (not rocket science its exactly as seen) & when called, via the thermometer icon next to the volume icon in the tray, the terminal output :



Yes upgraded the RAM to 2gig & now 4gig some time ago (original was 516mb & the CPU was MK-36 single core 2.0ghz - always struggling)
Smashing little battle bus & in a few ways I prefer it to the E6430 - speakers obviously (hopefully to be remedied) bigger screen & tuff as old boots  :P
Its got problems though - the graphics struggle a bit & the battery doesn't charge & the Ethernet port isn't working either (both require the soldering iron if & when I get round to it)

6
Hardware / Re: Dell Latitude 6430 - Speakers
« on: August 30, 2018, 07:19:32 am »
Afternoon
Just an update (if anyone's interested lol  ;D )

So as per:

Quote
I'm gonna get a replacement IO Daughter Board off Fleabay

I did indeed (only cost a little more 'cos mine got an additional Nvidia graphics chip but still only £11 - delivered & its brand new  ;) )

Did the 'deed' last Saturday when it chucked it down all day & Ta-Darrr!   - no change speakers still the same  :(

Everything else seems to work on the new IO Daughter Board just the same as the one I replaced it with, including the headphone jack which produces good sound too.

Well I guess regarding the speakers:

Quote
So either I am unlucky with my second-hand purchases....

So as they said in the old 'Topic' adverts - 'Try again Toby' so I'll buy another set & hopefully that will sort it. The problem is without a 'guaranteed' working set I'm just taking pot luck with fingers  crossed. So 'Once more into the breach...' (quotes ey? - I'm full of 'em lol  :D )


Off topic I know - but loosely connected  ;) had a result with the old banger (Inspiron 1501) though - got pretty much the top CPU that my board will work with - yes the mighty AMD Turion 64 x 2 TL 60 2.00 ghz (TMDTL60HAX5CT) - an upgrade of 0.4 ghz plus double the L2 cache - fitted it last week - small but noticeable upgrade in performance all for the princely sum of £2.49 delivered - happy bunny  :)  which is just as well as this is still my 'daily driver' 'cos of the speaker issue & the CPU isn't susceptible to the ongoing spectre issues (according to the spectre-meltdown-checker anyway). However it is still on P7 - because of the 4.4 kernel anything above that & it fails to shutdown nothing wrong with P7 at all - I'm very content with it but support won't go on forever (2020??) - may have to learn to compile my own kernel  :o you'll have to standby on here if I do lol  :D

7
Hardware / Re: Dell Latitude 6430 - Speakers
« on: August 01, 2018, 09:42:00 pm »
Cheers for digging that out Mark because I certainly had never seen it - perhaps I was barking up the wrong tree by putting in poor & distorted speaker output  ???
Prompted by your lead Mark I did a bit more rooting around & although I couldn't find an exact match for my circumstances it would seem a definite possibility that the issue in the link you gave could be the problem & to cut a long story short (as Spandau Ballet once said) I'm gonna get a replacement IO Daughter Board off Fleabay  ;)
Fingers crossed its OK & its that that's the problem - cos it entails stripping the lappy right down - again  ::)


8
Hardware / Re: Dell Latitude 6430 - Speakers
« on: August 01, 2018, 11:31:47 am »
Yep & from the other Linux OS (Void) that I have installed too  :( .
I also tested headphones from the jack with both & the sound was good - dare I say even excellent  :)
So I would say it's definitely hardware related - specifically to the speakers - so I really need to 'test' in that area because the soundcard (I presume) is not the issue  ???

9
Hardware / Dell Latitude 6430 - Speakers
« on: August 01, 2018, 10:30:13 am »
Good Afternoon
I bought one of these laptops off Fleabay after seeing VinDSL's post:

https://forum.peppermintos.com/index.php/topic,4890.0.html

and doing further research.

 These are the specs along with initial thoughts & issues:

https://forum.peppermintos.com/index.php/topic,4890.msg58268.html#msg58268

Since then I have rectified these initial issues by replacing the hard drive with HGST 1TB 7200rpm HDD (even though the WD 750GB HDD it came with seemed to work fine I was constantly worried it may fail & the clicking, though intermittent was annoying), I replaced the battery with a better second-hand one that lasts over twice as long & I swapped the standard keyboard for a backlit one along with upgrading the Wi-Fi card to a  ac-7260 (although there is no discernable difference because of my crappy router - but or less than a tenner off the ever ubiquitous Fleabay - cant complain  ;) ) as again per VinDSL's recommendations - cheers - and so it is now, spectre issues aside, a fine functioning machine with Pepp 8 (soon to be Pepp 9) on :)

However. as I posted here:

https://forum.peppermintos.com/index.php/topic,6106.msg61921.html#msg61921

My speakers are garbage & I mean garbage. As I say in my post there is lots of reverb & distortion & although I have tweaked with the Pulse Audio Equaliser
I cannot get a satisfactory sound. I also neglected to say that these are my second set of replacements (bought again off Fleabay), the first replacements were duff (not working at all) & these second set are pretty much the same as the originals.  :( Its also a right royal PITA to fit them as the whole laptop has to be virtually stripped down, motherboard out the lot  ::)

Headphones, via the jack, are good &, although I haven't got any, I therefore presume exterior speakers would be too (don't know about Bluetooth though as haven't got any of those either)
So either I am unlucky with my second-hand purchases or there is something amiss with the speaker output from the sound card.
From other postings around the net, including VinDSL's in this forum, I know they should be much better than I am experiencing - so has anybody got any ideas/experience regarding this & how I might might go about testing for possible problems & hopefully get a satisfactory resolution?  :)

10
Evening

Have had an issue whereby when I login to Pepp OS 8 on my laptop it will sometimes logs me into a blank screen (no Desktop), & hangs there with various repeated messages about kworker not loading different modules. I can login to a tty but when I try to
Code: [Select]
poweroff
  it wont shutdown & I have to hard shutdown.
 This problem has only happened over the last week & doesn't occur all the time but is becoming more frequent.

Here's my inxi -Fz:
Spoiler (click here to view / hide)
~ $ inxi -Fz
System:    Host: bong-L Kernel: 4.13.0-41-generic x86_64 (64 bit) Desktop: N/A Distro: Peppermint Eight
Machine:   System: Dell (portable) product: Latitude E6430 v: 01
           Mobo: Dell model: 0H3MT5 v: A00 Bios: Dell v: A21 date: 05/08/2017
CPU:       Quad core Intel Core i7-3720QM (-MCP-) cache: 6144 KB
           clock speeds: max: 3600 MHz 1: 1819 MHz 2: 1553 MHz 3: 1409 MHz 4: 1376 MHz
Graphics:  Card-1: Intel 3rd Gen Core processor Graphics Controller
           Card-2: NVIDIA GF108GLM [NVS 5200M]
           Display Server: X.Org 1.19.5 driver: intel Resolution: 1600x900@59.99hz
           GLX Renderer: Mesa DRI Intel Ivybridge Mobile GLX Version: 3.0 Mesa 17.0.2
Audio:     Card Intel 7 Series/C210 Series Family High Definition Audio Controller driver: snd_hda_intel
           Sound: Advanced Linux Sound Architecture v: k4.13.0-41-generic
Network:   Card-1: Intel 82579LM Gigabit Network Connection driver: e1000e
           IF: eno1 state: down mac: <filter>
           Card-2: Intel Wireless 7260 driver: iwlwifi
           IF: wlp3s0 state: up mac: <filter>
Drives:    HDD Total Size: 1120.2GB (1.5% used) ID-1: /dev/sda model: Samsung_SSD_840 size: 120.0GB
           ID-2: /dev/sdb model: HGST_HTS721010A9 size: 1000.2GB
Partition: ID-1: / size: 25G used: 6.6G (29%) fs: ext4 dev: /dev/sda5
           ID-2: swap-1 size: 9.29GB used: 0.00GB (0%) fs: swap dev: /dev/sdb2
RAID:      No RAID devices: /proc/mdstat, md_mod kernel module present
Sensors:   System Temperatures: cpu: 61.0C mobo: N/A gpu: 46.0
           Fan Speeds (in rpm): cpu: N/A
Info:      Processes: 190 Uptime: 3:26 Memory: 879.7/7880.5MB Client: Shell (bash) inxi: 2.2.35
[close]

As you can see I have dual graphics cards however no propriety drivers are installed (although optimus is enabled in the BIOS)

Another peculiarity about my install is that I somehow managed to install my Pepp partition (sda5 as a logical partition wholly within an extended partition sda1 - which is also the boot partition)  :-X





11
Further & hopefully final update

I tested an alteration to:

........................................................

But, before I mark it as solved, this is a bit convoluted & messy &, if I am correct, really the peppermint-firefox-themer script should be amended too so that it points to ff-light-theme in /usr/bin ?

You stated that:

Quote
if that doesn't work, I guess you'd just have to remove the blacklist for /usr/sbin .. I can tell you how to do this if you want ?

prompted by that I did a bit of digging & I believe you are referring to in /etc/firejail/disable-common.inc:

Code: [Select]
..........
# system directories
blacklist /sbin
blacklist /usr/local/sbin
blacklist /usr/sbin
..........

so I could
Code: [Select]
noblacklist  /usr/sbin
in /etc/firejail/firefox.profile (or more appropriately in copy of that profile: ~/.config/firejail/firefox.profile) & that would be all I would have to do! No further amendments required but would it break/lower the security of the sandbox?
I have tried this & it works.

I have also tried to restrict the noblacklist to specifically /usr/sbin/firefox:

Code: [Select]
# Firejail profile for firefox
# This file is overwritten after every install/update
# Persistent local customizations
include /etc/firejail/firefox.local
# Persistent global definitions
include /etc/firejail/globals.local

# Allow access to  /usr/sbin/firefox for light-theme
noblacklist  /usr/sbin
whitelist  /usr/sbin/firefox
blacklist  /usr/sbin/*

noblacklist ${HOME}/.cache/mozilla
..............
but it produces whitelist errors  - can you see where I've messed up?  :-\

I thought about it - specifically the whitelist errors - realised I was barking up the wrong tree  & should of noblacklisted it  & so made my ~/.config/firejail/firefox.profile file read:

Code: [Select]
# Firejail profile for firefox
# This file is overwritten after every install/update
# Persistent local customizations
include /etc/firejail/firefox.local
# Persistent global definitions
include /etc/firejail/globals.local

# Allow access to /usr/sbin/firefox for light-theme
noblacklist /usr/sbin
noblacklist /usr/sbin/firefox
blacklist /usr/sbin/*

noblacklist ${HOME}/.cache/mozilla
………………….
& it works - firefox is launched under firejail with the light theme  :)

I posted this comment on the Firejail support page:
Quote
I would like one of the existing profiles to enable the application I am running to be able to read a script in /usr/sbin to force a light-theme on the application in an otherwise dark-themed DE.
I copied the existing profile to ~/.config/firejail/ & amended the profile by adding in the second paragraph (see below). Although this works, is it because the whole /usr/sbin directory is un-blacklisted or is it as I hope that just the /usr/sbin/firefox script file is & the rest of the /usr/sbin is then subsequently re-blacklisted?

# Firejail profile for firefox
# This file is overwritten after every install/update
# Persistent local customizations
include /etc/firejail/firefox.local
# Persistent global definitions
include /etc/firejail/globals.local

# Allow access to /usr/sbin/firefox for light-theme
noblacklist /usr/sbin
noblacklist /usr/sbin/firefox
blacklist /usr/sbin/*

noblacklist ${HOME}/.cache/mozilla
………………….

And got this response:
Quote
It is fine, in your /usr/sbin only firefox script is available, everything else is blacklisted. You can check it easily by running something like:

$ firejail –noblacklist=/usr/sbin –noblacklist=/usr/sbin/firefox –blacklist /usr/sbin/*
Reading profile /etc/firejail/default.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc

** Note: you can use –noprofile to disable default.profile **

Parent pid 1836, child pid 1837
Child process initialized in 38.84 ms
$ ls -l /usr/sbin

I tested it as above & also commenting out the line:

Code: [Select]
noblacklist /usr/sbin/firefox
in my  ~/.config/firejail/firefox.profile to prove the negative (i.e. firefox shouldn't launch because firejail won't read the /usr/sbin directory) & it acts as it should in both cases.

Also since all 'standard' firejail profiles also try to source the additional customization file /etc/firejail/<appname>.local when read, if you simply want to 'tweak' an existing profile, you can supply your additional configuration settings via that file - this approach has the benefit of allowing the main application profile to be upgraded whenever the rest of the package is  ;)

 I removed the ~/.config/firejail/firefox.profile & created an /etc/firejail/firefox.local file that reads only:

Code: [Select]
# Allow access to /usr/sbin/firefox for light-theme
noblacklist /usr/sbin
noblacklist /usr/sbin/firefox
blacklist /usr/sbin/*

So to install Firejail, set it up so all installed applications, that have a provided firejail.profile, to run under Firejail (including firefox with a light theme envoked by the Firefox Themer utility):

Install firejail

Run:

Code: [Select]
firecfg--fix-sound

This command fixes some bugs in PulseAudio software versions available on most Linux platforms. After running it, logout and login again for the modifications to take effect. Info:https://firejail.wordpress.com/support/#pulseaudio

Run:

Code: [Select]
$ sudo firecfg
which will create links in /usr/local/bin/ for installed applications with firejail profiles so to integrate firejail with the desktop so the said applications launch under firejail (any application that is automatically link by firecfg command that you don't wish to run under firejail can be achieved by removing the link for that application from the  /usr/local/bin/ directory).

Then, as stated above, make & edit (as root) a /etc/firejail/firefox.local file to read:

Code: [Select]
# Allow access to /usr/sbin/firefox for light-theme
noblacklist /usr/sbin
noblacklist /usr/sbin/firefox
blacklist /usr/sbin/*
save the file & exit

 I then update the system databases:

Code: [Select]
$ sudo updatedb
& voila alls good in the 'hood  ;)

So after 'going all round the p*sspot to get to the handle' (as my ex-girlfriend used to say  :D ) its solved in the most minimal way :)


12
Software & Applications / Re: Firejail - Pepp 8 issues - SOLVED
« on: April 29, 2018, 09:42:54 pm »
Update

After some further digging I found this:

https://wiki.gentoo.org/wiki/Firejail#Using_Firejail_by_default

Quote
Using Firejail by default

A symbolic link to /usr/bin/firejail under the name of a program, will start the program in Firejail sandbox. A good place is /usr/local/bin directory. For example to run Firefox with firejail by default:
Code: [Select]
$ sudo ln -s /usr/bin/firejail /usr/local/bin/firefox

This works for clicking on desktop environment icons, menus etc. Use firejail --tree to verify the program is sandboxed.
Code: [Select]
user $firejail --tree

23615:user:firejail /usr/bin/firefox
  23616:user:firejail /usr/bin/firefox
    23618:user:/usr/bin/firefox
Alternatively you can create the following file instead and make it executable:
 /usr/local/bin/firefox:
Code: [Select]
#!/bin/bash
firejail /usr/bin/firefox $@

This method allows command line options to be passed to firejail. Remember to make it executable with chmod +x /usr/local/bin/firefox.

So if I prefaced the script in the /usr/local/bin/firefox file with:
Code: [Select]
env GTK_THEME=Peppermix-Light-7-Red

Making it:
Code: [Select]
#!/bin/sh

env GTK_THEME=Peppermix-Light-7-Red firejail /usr/bin/firefox "$@"

it would envoke the light theme on launching firefox under firejail.
Note:This script file is almost identical to the /usr/sbin/firefox file created by the Firefox Themer application with just "firejail" inserted (See below).


This method not only works but is the simplest option yet - So once again from the top with feeling  :D:

Install firejail

Run:
Code: [Select]
firecfg--fix-sound
This command fixes some bugs in PulseAudio software versions available on most Linux platforms. After running it, logout and login again for the modifications to take effect. Info:https://firejail.wordpress.com/support/#pulseaudio

Run:
Code: [Select]
$ sudo firecfg
which will create links in /usr/local/bin/ for installed applications with firejail profiles so to integrate firejail with the desktop so the said applications launch under firejail

Remove the firefox link:
 
Code: [Select]
$ sudo rm /usr/local/bin/firefox

Now copy the usr/sbin/firefox file created by Firefox Themer to /usr/local/bin/:
Code: [Select]
$ sudo cp usr/sbin/firefox /usr/local/bin/firefox

Amend the /usr/local/bin/firefox file in a text editor read:
Code: [Select]
#!/bin/sh

env GTK_THEME=Peppermix-Light-7-Red firejail /usr/bin/firefox "$@"
save the file & exit the editor

I then update the system databases:
Code: [Select]
$ sudo updatedb

Restart firefox if running & all should be OK - firefox with light theme envoked running under firejail with desktop integration  :)

This is only necessary with a system-wide dark theme to get firefox using a light theme under firejail & the only issue with the solution in this post is that to get firefox to run with the system-wide dark theme requires the editing of the /usr/local/bin/firefox file to remove the:
Code: [Select]
env GTK_THEME=Peppermix-Light-7-Red 
Hope this helps  :)


13
Software & Applications / Re: Firejail - Pepp 8 issues
« on: April 19, 2018, 05:19:29 am »
Yes, simply changing that section in disable-common.inc to?:-
Code: [Select]
..........
# system directories
blacklist /sbin
blacklist /usr/local/sbin
# blacklist /usr/sbin
..........
Would have negated the need for ANY other changes.
...................


Yes I agree that would be the case BUT that would be pretty much system-wide for any application launched under Firejail as, from what I have seen, they all include the disable-common.inc settings in their Firejail profiles & not blacklisting /usr/sbin for them would be neither necessary or desirable.
So, IMHO, I suggest if anyone did want blacklist /usr/sbin for the purpose of using firefox system-wide under Firejail with light-theme enforced by Firefox Themer to do as I have stated in my last post.

I tried 'noblacklist /usr/sbin' and 'noblacklist /usr/sbin'/firefox' .. but for me they didn't work, only removing the blacklist of /usr/sbin itself seemed to work .. YMMV.

Yes Mark I am having difficulty getting just /usr/sbin/firefox not to be blacklisted - I may tinker a bit more & may ask over on the Firejail forum to see if it can be done  ;)  - I don't really like having the whole /usr/sbin/ unblacklisted (maybe a bit paranoid ey??  ::) )

Anyway I'll mark this as solved now as there is a workable solution & once again Mark cheers for your help  :)

14
Software & Applications / Re: Firejail - Pepp 8 issues
« on: April 18, 2018, 11:03:53 am »

So is it solved now, or are you still having problems ?


Well all seems to be working OK  :)

But, before I mark it as solved, this is a bit convoluted & messy &, if I am correct, really the peppermint-firefox-themer script should be amended too so that it points to ff-light-theme in /usr/bin ?

You stated that:

Quote
if that doesn't work, I guess you'd just have to remove the blacklist for /usr/sbin .. I can tell you how to do this if you want ?

prompted by that I did a bit of digging & I believe you are referring to in /etc/firejail/disable-common.inc:

Code: [Select]
..........
# system directories
blacklist /sbin
blacklist /usr/local/sbin
blacklist /usr/sbin
..........

so I could
Code: [Select]
noblacklist  /usr/sbin
in /etc/firejail/firefox.profile (or more appropriately in copy of that profile: ~/.config/firejail/firefox.profile) & that would be all I would have to do! No further amendments required but would it break/lower the security of the sandbox?
I have tried this & it works.

I have also tried to restrict the noblacklist to specifically /usr/sbin/firefox:

Code: [Select]
# Firejail profile for firefox
# This file is overwritten after every install/update
# Persistent local customizations
include /etc/firejail/firefox.local
# Persistent global definitions
include /etc/firejail/globals.local

# Allow access to  /usr/sbin/firefox for light-theme
noblacklist  /usr/sbin
whitelist  /usr/sbin/firefox
blacklist  /usr/sbin/*

noblacklist ${HOME}/.cache/mozilla
..............
but it produces whitelist errors  - can you see where I've messed up?  :-\

15
Software & Applications / Re: Firejail - Pepp 8 issues
« on: April 17, 2018, 09:11:18 am »
Well I've tried what you have suggested Mark & all that happens is firefox launches, granted with the light theme, but not under Firejail. If I run:

Code: [Select]
$ firejail --tree
I see firefox isn't there i.e. its not running under Firejail - I think the path by-passes Firejail totally - which is kind of what I would expect if the firefox.desktop launcher points directly to /usr/bin/ff-with-light-theme - there is no link to associate it with Firejail.


So to recap this is what's already done:

Code: [Select]
$ sudo cp /usr/sbin/firefox /usr/bin/ff-with-light-theme
(As you initially suggested)


Made an exact copy of the Firejail profile for firefox renamed as ff-with-light-theme.profile & it has been placed in the ~/.config/firejail/ directory as recommended by the Firejail site, as it is a custom profile & it wont get removed during any update to Firejail:

Code: [Select]
$ sudo cp /etc/firejail/firefox.profile ~/.config/firejail/ff-with-light-theme.profile

I have now created a local desktop launcher for firefox in my user directory:

Code: [Select]
sudo cp /usr/share/applications/firefox.desktop ~/.local/share/applications/
opened the file with text editor as sudo:

Code: [Select]
$ sudo nano ~/.local/share/applications/firefox.desktop
& changed the Exec line to read:

Code: [Select]
Exec=ff-with-light-theme
(The same result can be achieved by editing the Firefox Web Browser graphical menu launcher so the command line reads 'ff-with-light-theme' & not 'firefox %U') - again as you suggested Mark.


I then made a symlink for the ff-with-light-theme.profile in /usr/local/bin that points to /usr/bin/firejail:

Code: [Select]
sudo ln -s /usr/bin/firejail /usr/local/bin/ff-with-light-theme
so to invoke Firejail when ff-with-light-theme is called (these symlinks are what are created by $ sudo firecfg - see OP)


I then updated the desktop database:

Code: [Select]
sudo update-desktop-database
And then the system database:

Code: [Select]
sudo updatedb

And all seems OK  :)


Though in reality I don't know why you require this additional profile at all .. I don't  :-\

As in my second post; prior to creating a ff-with-light-theme.profile for Firejail if I then launch it in the terminal:

~ $ firejail ff-with-light-theme
Reading profile /etc/firejail/default.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc

** Note: you can use --noprofile to disable default.profile **

Parent pid 3709, child pid 3710
Child process initialized in 46.37 ms
Error: Access was denied while trying to open files in your profile directory.

Parent is shutting down, bye...

& it is accompanied with a popup from firefox:



And I've just explained above what happens when I click the firefox desktop launcher with the command pointing at ff-with-light-theme - & I've tried this with & without the firejail ff-with-light-theme.profile created - so how does it work for you Mark?  ???

Pages: [1] 2 3 ... 12