apparmor.d VS electron-discord-webapp

If anyone want to look further into sandboxing applications on Linux, you can also look at AppArmor and the sandboxing features built into systemd.

I love this repository for bases for AppArmor profiles[1], really good work. Never found a repository as good for systemd, but there are a few around.

[1] https://github.com/roddhjav/apparmor.d

Then, categorize all your script zoo: maybe some script group want to only read the data, while some need to write, maybe one group needs to use certain set of binaries, and other group - others.

You could utilize some profiles from apparmor.d repo, but you should be slightly aware how it works (disclaimer: I'm the contributor).

Regardless, I wrote an AppArmor profile so it couldn't happen again.

Maintainer's response.

There is a project in early development: apparmor.d. Adopting some or all profiles will do the job. To use it smoothly, basic AppArmor knowledge is required. (I'm the contributor)

Dependent on the OS and Firefox distribution. I can advertise profile that I co-maintain. It uses non-standard tunables, which will require some README reading to get them into the system.

Red Hat based distros come preconfigured with a lot of SELinux policies. With AppArmor, you get basically nothing. There is a project I also contribute to from time to time, that gives you a lot more policies, but this is entirely out-of-tree (https://github.com/roddhjav/apparmor.d).

I stan WebCord.

git page

I love both WebCord and discord-screenaudio, but for me and a lot of my friends, streaming using any chromium application is a laggy mess, especially when streaming games! In result, I built this extension which feeds audio nodes to WebRTC streams, currently only works with Firefox and Pipewire. I have packaged it for NixOS, but I need package maintainers for other distros too. Anyone willing to help by packaging the native part of the extension or just contributing to the project, is welcome!

Webcord also has this exact same feature I think, but it may be hidden under some command line flags, at least it was when I last tried it (and failed).

Stop using official discord binaries. Huge hole in your setup. Use Webcord

for discord I used https://github.com/SpacingBat3/WebCord

Also, if you're using discord I recommend you to check out WebCord, a privacy and security oriented front end. It's available on Windows and Linux I believe.

You could give WebCord a try. I used it for some time now and I'm pretty happy