DtxdF

D-Bus is a powerful daemon that enables applications to communicate seamlessly within our environment. As a very powerful daemon, it can pose a security risk if not used correctly. Much like Firejail and Flatpak, x11appjail now uses xdg-dbus-proxy to filter D-Bus communication between the jail and the host system.

In this video, I use linux-brave to demonstrate how notifications appear on the host system, how to use playerctl to control the linux-brave player via MPRIS, and how the theme of my desktop environment (in this case, a dark theme) is honored. We will also look at what happens when the bus session is not started.

Project: https://github.com/DtxdF/x11appjail

x11appjail is a specialized tool for creating, verifying, installing, and running AppJails. An AppJail is a CLI, TUI or X11 application that runs inside a FreeBSD jail but is perceived by the end user as identical (or at least very similar) to an application running directly on the host system.

This tool makes extensive use of appjail(1) as its engine; however, unlike the latter, the primary user in x11appjail is neither root nor a privileged user, but rather an unprivileged user. The fundamental goal of this project is to grant the user limited access to the jail, restricted solely to the execution of a CLI, TUI or X11 application.

Project: https://github.com/DtxdF/x11appjail

Thanks! I will write more posts on my blog or on AppJail wiki about some of them.