Wiki: Sandboxing Binary Software

[netblue30]

Issue for discussions about https://github.com/netblue30/firejail/wiki/Sandboxing-Binary-Software

[matu3ba]

The description is consistent for LTS versions, but not newer versions. These are installed to /usr/local.
Maybe it would be nice to mention the user to check, if there does exist a profile yet to restrict the programs data access (for example to the default folder).

#397 could be used for further ideas.

[rusty-snake]

@matu3ba #2748 (comment)

[matu3ba]

@rusty-snake Did add #2748 command to Profiles and linked there.

[matu3ba]

Closing this?

[Mikaela]

Would it be OK to add instructions to verify gpg signatures of applications on the page?

For example with Tor Browser it would be adding

• gpg --auto-key-locate nodefault,wkd --locate-keys torbrowser@torproject.org
• gpg --verify tor-browser-linux64-8.5.1_en-US.tar.xz.sig

With Firefox it would be a bit more tricky digging the signature from https://releases.mozilla.org/pub/firefox/releases/ and key from https://blog.mozilla.org/security/2019/06/13/updated-firefox-gpg-key/

[rusty-snake]

Sounds good to me.

[rusty-snake]

#4449