yea ik but that only complains about default permissions
1 reply
you can adjust those
Nicer, I think, to run the thinnest possible container with no root privs and files selectively mounted
But I wonder about dataloss if the docker service crashed (or something). Maybe the host is just backing up the profiles dirs for a bit to test.
I think the most common method is using com.github.tchx84.Flatseal to limit directory access
hi, is there a way to disable Progressive Web App install prompts?
Are there any security improvements to vanadium that could be applied to UG too?
I've looked through the patches quickly, seems to be mostly default settings and basic fixes
2 replies
https://theevilskeleton.gitlab.io/2021/02/11/response-to-flatkill-org.html -> gonna study this and look into the best config options for flatpak for running chromium, for now.
The topic can be expanded all the way to pages, and it is not a "right vs. wrong" thing. Some very quick points being: 1. bubblewrap is better in terms of security, failjail has better usability; 2. Like flatpak, failjail needs to be set-up correctly otherwise it's a placebo; 3. Linux desktop is inherently insecure, thus Qubes. However security is usually not the first priority in the choice of using Linux; 4. It is kind of unfair to blame flatpak because packages set their own permissions; it can be improved probably with a permission whitelist like Android but that's a design choice.
You could use
flatpak-override or a front-end to it like Flatseal to change that and harden it
hello this is probably a silly question but I am not a seasoned chromium user.. how can I disable the home screen shortcuts from visited websites? I could not find any pertinent settings and am not sure how its persisting
I have site data to clear on exit.. hmm
You can also set a custom new tab page with the custom-ntp flag (in case there's no other way to disable them)
I'm able to log in to my account, but when it loads teams it hangs on the load until it times out and gives a generic "We've encountered a problem". When I log in from browsers that work, it flips through about a half dozen URLs that it fetches. On UGC it stops after about the second. I wondered if it had to do with the auto-https when no transport method is specified, but that's just speculation.
works for me on flatpak
and auto https didn't make a difference
I can't find any good privacy-focused browser that works with my Teams. I hate having to use Chrome.
Well if it works for me it should also work for you really
Do you have cookies enabled? For me it complained about that
Thanks
I didn't think about saying that earlier because for me the error was really verbose, it even told me a list of domains to add as exceptions but I guess thats not a thing with the portal maybe
any help for a n00b? ive recently dropped chrome for ungoogled chrome browser. im having trouble setting up widevine plugin. needed netflix
done all the relevant searching for answers etc already.
while looking at the relevant documentation for the browser. the directions were to copy/paste widevine files into the widevinecdm folder. but still there is an issue
What instructions did you follow and what issue are you experiencing?
it states i have to download widevinecdm files and place them in the programs widevine folder. then i went to chrome compartments to update widevine plugin. the update doesnt finish and the version stays at 0.0.0.0
it should be 4.10 etc
or should i say the instructions to install widevine
Any thoughts on unblock origin not working as well as it could in chromium - or ways to remedy it? https://github.com/gorhill/uBlock/wiki/uBlock-Origin-works-best-on-Firefox