← Back to context

Comment by elric

8 months ago

Or firejail. Or QubesOS using a dedicated VM. There are options, but it would still be nice if Obsidian had a more robust security model.

11 comments

elric

Reply
johnisgood  8 months ago

I have been using firejail for most of these kind of applications, be it Obsidian, Discord, or the browser I am using. I definitely recommend people start using it.

  • dotancohen  8 months ago

    Sell it to us! Why do you use specifically firejail?

    There are so many options, from so many different security perspectives, that analysis paralysis is a real issue.

    • johnisgood  8 months ago

      I feel like I should keep track of all my comments on HN because I remember writing a lengthy comment on firejail more than once. I cannot keep doing this. :D

      For user-space, there is usually bubblewrap vs. firejail. I have not personally used bubblewrap, so I cannot comment on that, but firejail is great at what it does.

      The last comment was about restricting clipboard access to either X11 or Wayland which is possible with firejail quite easily, so if you want that, you can have that.

      You can do a LOT more with firejail though.

      https://wiki.archlinux.org/title/Firejail

      https://man.archlinux.org/man/firejail.1

      8 replies →