Anyone else have issues with the browser since the update? I have installed a pretty hefty /etc/hosts
on my phone to block unwanted cruft when browsing, since I cannot manage to install Privacy Badger, and since the update the browser is ignoring these entries.
This seems to be related to the new firejail setup (which is a really great idea, btw!). I’ve looked into it a bit and it looks like it should work. Browser process runs like this (according to ps)
/usr/bin/firejail --quiet --profile=/etc/sailjail/permissions/Base.permission --profile=/etc/sailjail/permissions/Mozilla.permission --profile=/etc/sailjail/permissions/Audio.permission --profile=/etc/sailjail/permissions/Location.permission --profile=/etc/sailjail/permissions/Internet.permission --profile=/etc/sailjail/permissions/Downloads.permission --profile=/etc/sailjail/permissions/Documents.permission --profile=/etc/sailjail/permissions/Pictures.permission --profile=/etc/sailjail/permissions/Videos.permission --profile=/etc/sailjail/permissions/Music.permission --profile=/etc/sailjail/permissions/Sharing.permission --profile=/etc/sailjail/permissions/sailfish-browser.profile --whitelist=/usr/share/sailfish-browser --whitelist=/usr/share/applications/sailfish-browser.desktop --whitelist=/home/nemo/.local/share/sailfish-browser --mkdir=${HOME}/.cache/org.sailfishos/browser --whitelist=${HOME}/.cache/org.sailfishos/browser --mkdir=${HOME}/.local/share/org.sailfishos/browser --whitelist=${HOME}/.local/share/org.sailfishos/browser --mkdir=${HOME}/.config/org.sailfishos/browser --whitelist=${HOME}/.config/org.sailfishos/browser --dbus-user=filter --dbus-user.own=org.sailfishos.browser --private-bin=sailfish-browser -- /usr/bin/sailfish-browser
The Internet.permission
profile contains this entry:
private-etc ssl,hosts,pki,crypto-policies
Which, AFAICT, should copy the hosts file into the private jail. However, all the blocked entries (that are hardcoded to go to 0.0.0.0 in /etc/hosts) will now open in the browser. If I open the browser from the terminal without jailing it, this doesn’t happen.