Pale Moon look terrible in Firejail

[z18g11]

I run Pale Moon browser in Firejail and it looks terrible
https://i.imgur.com/6C78oGG.png

run it with this command

Code: Select all

firejail –private=/home/user/Data/firejail /usr/bin/palemoon

How can I apply my own theme? I put gtk-2.0 and gtk-3.0 themes (Manjaro’s Breath-Dark) in
/home/user/Data/firejail/.themes

but Pale moon seems to not apply this theme.
Normally I use Plasma 5 Breeze-Dark with qtcurve.

How to combine this Firejail command with some command (kind of: GTK-theme=) to use my preferred theme in Pale moon?

Do I need to put some gtk setting file in /home/user/.config?

Pale moon is still gtk2? Correct?

At least I would like to be able use Adwaita that I have installed and set in Plasma system settings for gtk2. But I need to know what file Pale Moon reads to set theme.

[New Tobin Paradigm]

Don't use firejail.

[Moonchild]

If you insist on using firejail you'll have to set it up correctly for the browser. Please ask in the firejail-users community how to.

[z18g11]

Solution:

Code: Select all

GTK2_RC_FILES=/usr/share/themes/Adwaita/gtk-2.0/gtkrc firejail --private=/home/user/path/ /usr/bin/palemoon

[New Tobin Paradigm]

Solution:

Code: Select all

GTK2_RC_FILES=/usr/share/themes/Adwaita/gtk-2.0/gtkrc firejail --private=/home/user/path/ /usr/bin/palemoon

That would be "If you insist solution". BTW. It still isn't recommended you run any UXP application inside of a sandbox.

[pizzadude]

I know I'm necroing the thread right now, but I found a fix.

sudo nano /etc/firejail/palemoon.local

paste this:

Code: Select all

noblacklist ~/.config/Trolltech.conf
noblacklist ~/.config/gtk-3.0
noblacklist ~/.config/gtk-2.0
noblacklist ~/.config/Kvantum
noblacklist ~/.gtkrc-2.0
noblacklist ~/.gtkrc-2.0-kde4
whitelist ~/.config/Trolltech.conf
whitelist ~/.config/gtk-3.0
whitelist ~/.config/gtk-2.0
whitelist ~/.config/Kvantum
whitelist ~/.gtkrc-2.0
whitelist ~/.gtkrc-2.0-kde4

[Moonraker]

Solution:

Code: Select all

GTK2_RC_FILES=/usr/share/themes/Adwaita/gtk-2.0/gtkrc firejail --private=/home/user/path/ /usr/bin/palemoon

That would be "If you insist solution". BTW. It still isn't recommended you run any UXP application inside of a sandbox.

Any particular reason why not.?.Im sure users would appreciate the added security.

[Moonchild]

Im sure users would appreciate the added security.

Added security as compared to what? You think Pale Moon isn't secure enough to display active web pages?
The "added security" may actually be detrimental. Running Pale Moon in a sandbox won't add anything to your system security and may in fact create attack surfaces otherwise not present, depending on the sandbox. I only suggest jailing processes if they are an inherent risk to the system (like language interpreters running bare, etc.)

[pizzadude]

Im sure users would appreciate the added security.

Added security as compared to what? You think Pale Moon isn't secure enough to display active web pages?
The "added security" may actually be detrimental. Running Pale Moon in a sandbox won't add anything to your system security and may in fact create attack surfaces otherwise not present, depending on the sandbox. I only suggest jailing processes if they are an inherent risk to the system (like language interpreters running bare, etc.)

I just prefer to run all my web browsers in firejail, to restrict access in case there's a 0-day exploit.

[Moonraker]

Im sure users would appreciate the added security.

Added security as compared to what? You think Pale Moon isn't secure enough to display active web pages?
The "added security" may actually be detrimental. Running Pale Moon in a sandbox won't add anything to your system security and may in fact create attack surfaces otherwise not present, depending on the sandbox. I only suggest jailing processes if they are an inherent risk to the system (like language interpreters running bare, etc.)

Sorry moonchild i was not implying palemoon is not safe in that regard,it's just everyone seems to be into this sandboxing everything and running in virtual environments etc..Linux already has a strong sandbox and in my case on puppy linux i could run as spot if i wished.Thanks for your reply.

[Moonchild]

it's just everyone seems to be into this sandboxing everything and running in virtual environments

I get that -- but not every application is happy about being jailed/virtualized/sandboxed.