3 ms·

Isn't restricting chromium to only ~/Downloads already possible in a regular Linux OS by running chromium inside a chroot?

• tyingq 5y ago
  Perhaps, though with a fair amount of hassle giving it access to device files, shared libraries, dynamically loaded plugins, and so on.
  • tata71 5y ago
    You'd use a portable build.
  • yjftsjthsd-h 5y ago
    The easy option is firejail, which ships with premade profiles to give things exactly what they need to run, ex. https://github.com/netblue30/firejail/blob/master/etc/profile-a-l/chromium.profile https://github.com/netblue30/firejail/blob/master/etc/profil...
    • tyingq 5y ago
      Sort of. For example: https://github.com/netblue30/firejail/issues/1950 https://github.com/netblue30/firejail/issues/1950 There are other, similar issues. It's a fair amount of work sussing it all out.
• DarylZero 5y ago
  Not really, since ~/Downloads isn't inside a chroot. You accomplish it most easily with AppArmor. Anyway, OP is telling you how to do it with OpenBSD, which is also a "regular" OS.
  • deleted 5y ago
    [deleted]