Execute firecfg on every change?

[francoism90]

To use Firejail as default, one can use # firecfg to create symlinks and fix *.desktop files.

Would it be useful to have a package manager hook and/or systemd service to allow checking and recreating this on every boot?

# firejail@.service -> firejail@archie.service
[Unit]
Description=Creates symbolic links for Firejail

[Service]
Type=oneshot
ExecStart=/usr/bin/firecfg
ProtectSystem=strict
ReadWritePaths=/etc/firejail
ReadWritePaths=/usr/local/bin
ReadWritePaths=/home/%i/.local/share/applications
Environment=SUDO_USER=%i
Environment=HOME=/home/%i

[Install]
WantedBy=multi-user.target

Is this concerned as a bad practice?

Thanks.

[SkewedZeppelin]

But why?

[francoism90]

@SkewedZeppelin When installing new and/or removing applications, entries are getting out-of-dated or not symlinked at all.

[reinerh]

For Debian-based systems you could install a trigger in /etc/apt/apt.conf.d/ that will run firecfg each time after you install something with apt (something like Dpkg::Post-Invoke {"firecfg";} (untested)).
https://wiki.debian.org/AptConf

[francoism90]

@reinerh That's actually a better idea! On Arch Linux pacman hooks are available and can do the same thing. :)

[SkewedZeppelin]

@francoism90 feel free to make a PR adding the systemd unit file and the pacman alpm hook to the contrib directory