Ashtray

Experimental standalone Firejail GUI and Systray

TODO

• Implement a webview/webview based UI
• Implement a server that manages firejail profiles and desktop files
• Implement a systray icon that pops up the webview UI
• Create a database for known CLI parameters of programs
• e.g. Chromium Sandbox or Firefox Sandbox

Features

• Application Lookup/Search via Program Name

• Folder defaults

• Restrict /dev directory

• Restrict /home directory

• Restrict /tmp directory

• Restrict /mnt and /media directories

• Network: System network, Namespace, or disabled

• DNS: Use locally provided DNS firewall

• DNS: Use configured DNS IPs

• Network Protocols: unix, inet (IPv4), inet6 (IPv6), netlink, packet

• Multimedia: Disable Sound, disable video camera devices

• Parameter defaults

• Tracer/Run once feature to auto-profile accessed files on the filesystem

• Sandbox builder: Allow creation of custom sandboxes that have all dependencies and shared libraries packaged inside them