profiles-m-r¶

mkosi¶

This profile is large on purpose:

It is required to have a profile for mkosi to allow userns.
Mkosi uses a lot of different binaries and scripts inside sandbox.
Using the unconfined flag would Pix everything, we do not want that as the transitioned profile would have to account for mkosi paths too.

To force the use of the Gnome Keyring or Kwallet secret-service, add the following lines in your local/protonmail-bridge-core file:

 deny @{bin}/pass x,
 deny owner @{user_passwordstore_dirs}/** r,