status-im
/
status-security
mirror of https://github.com/status-im/status-security.git
2
0
Fork 0
Code Issues Projects Releases Wiki Activity

Replace Firejail with Bubblewrap for sandboxing 

Bubblewrap is considered much more secure than Firejail. With [better design](https://github.com/containers/bubblewrap) & less attack surface.
This commit is contained in:
OxFred 2022-02-17 11:31:43 +01:00 committed by GitHub
parent c3976af512
commit cee3a21083
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
drafts/linux-recommendations.md
View File

@ -220,7 +220,7 @@ You will be in charge to update LedgerLive within the application itself.
- Review services & firewall settings
- Use an application Firewalls like OpenSnitch https://github.com/evilsocket/opensnitch
- Consider an immutable OS like Fedora Silverblue https://docs.fedoraproject.org/en-US/fedora-silverblue/
- Sandbox application you do not fully trust with Firejail https://github.com/netblue30/firejail
- Sandbox application you do not fully trust with Bubblewrap https://github.com/containers/bubblewrap
- Use Flatseal if you are using Flathub https://github.com/tchx84/Flatseal
- Consider hardening Web browsers specific settings
- Setup Yubikey for PAM login https://developers.yubico.com/yubico-pam/