Whoever is handling the keepassxc port should definitely add this note for chromium-based browsers too. I never would have guessed this needs /usr/local/bin r in unveil.

Courtney

On 5/22/22 10:38, Joel Carnat wrote:
On Sun, 22 May 2022 19:27:19 +0200
Antoine Jacoutot <[email protected]> wrote:

On Sun, May 22, 2022 at 07:17:49PM +0200, Joel Carnat wrote:
Hello,

 From a brand new 7.1/amd64 installation, I'm trying to use
keepassxc-proxy with Iridium. As I did for Firefox-ESR, I added
"/usr/local/bin/keepassxc-proxy rx" to /etc/iridium/unveil.main.
But it never connects to the database.
I think you also need:
/usr/local/bin r

Yep, it solves both Iridium & Chromium issues.
Thanks a lot.

Using Firefox-ESR, it works ok.
Using "iridium --disable-unveil", it works ok.
Using Chromium, it doesn't work either. When disabling unveil, it
works.

I've tried looking at ktrace/kdump but I don't really know what to
look for. When searching for "NAMI.*keepassxc", I could only find
calls that seem to end properly (RET 0).

Anyone knows what to add to unveil.main to have keepassxc-proxy?
What should I be looking for in kdump to identify what fails?

ktrace.out is a bit more 100MB but I can make it available online
if it helps.

Thanks,
Joel C.

Reply via email to