Firejail won't run jails inside of other firejails, which means that if
I jail Mutt I can't use firewarden in my mailcap to open attachments.
Mutt doesn't do a whole lot itself, and even when it is jailed, my mail
is synced outside of the Mutt jail via the systemd timer. So I think I'd
rather be able to use firewaden in my mailcap.
This will be a breaking change for existing users.
After running the new tasks to install and enable LightDM, disable Slim:
# systemctl disable slim.service
LightDM uses `~/.xprofile` instead of `~/.xinitrc`. Move all of the
contents from `~/.xinitrc` to `~/.xprofile`, except for the `exec` line.
In your `~/.xinitrc` you can source your new `~/.xprofile` so that it is
still functional in case you find yourself using it again.
https://wiki.archlinux.org/index.php/Xprofile3a75c5d454
On the next reboot you'll be greeted by LightDM. Slim can then be
uninstalled.
# pacman --remove slim
The Arch package used to provide this. Now it doesn't.
To use this, you'd just enable and start it as your user.
$ systemctl --user enable mpd.service
$ systemctl --user start mpd.service
Existing users can remove the override we used to install, since that is
now redundant.
# rm -r /etc/systemd/user/mpd.service.d
Without this, Tor has started complaining about not being able to access
/dev/zero (despite Firejail making it available). Somebody should write
a real profile for this at some point...
An update at some point in the past week or two caused tor to break when
it was launched within Firejail as the tor user. Instead we launch the
jail as root and then have Tor drop privileges. I'm not sure why this is
necessary.
