github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #1570] Avoid 'exo-open' on xfce desktop #1046

New issue

Closed

opened 2026-05-05 07:21:35 -06:00 by gitea-mirror · 3 comments

gitea-mirror commented

2026-05-05 07:21:35 -06:00

Owner

Originally created by @jockerz on GitHub (Sep 22, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1570

I tried run firejail-ed xpdf with --net=none.
Maybe does same case on another app which lead to open url.

When a link on a pdf file clicked, the url will opened successfully on web browser(if the browser has already opened) on new tab.

The web browser will be prevented to connect internet if the url call will open new web browser window.

--debug: not give any useful info to the case.

Please give a try for any one. I'm not good at catching bug yet.

Originally created by @jockerz on GitHub (Sep 22, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1570 I tried run _firejail_-ed xpdf with `--net=none`. Maybe does same case on another app which lead to open _url_. When a link on a pdf file clicked, the url will opened successfully on web browser(if the browser has already opened) on new tab. The web browser will be prevented to connect internet if the _url call_ will open new web browser window. `--debug`: not give any useful info to the case. Please give a try for any one. I'm not good at catching bug yet.

gitea-mirror

2026-05-05 07:21:35 -06:00

closed this issue
added the
information_old
label

gitea-mirror commented

2026-05-05 07:21:40 -06:00

Author

Owner

@smitsohu commented on GitHub (Sep 22, 2017):

Hey @jockerz. Do you use Firefox? Chances are that you have run into #784. Different issue but related is also #330.

@smitsohu commented on GitHub (Sep 22, 2017): Hey @jockerz. Do you use Firefox? Chances are that you have run into #784. Different issue but related is also #330.

gitea-mirror commented

2026-05-05 07:21:41 -06:00

Author

Owner

@smitsohu commented on GitHub (Sep 24, 2017):

Still assuming you run Firefox some more possibilities to approach this:

Running Firefox with -no-remote option will stop this behavior. Equally, you can put export MOZ_NO_REMOTE=1 in ~/.xsessionrc (or wherever you configure your X session), or place env MOZ_NO_REMOTE=1 inside /etc/firejail/firefox.local.
What should also work is isolating xpdf (or Firefox) from your main X session by means of Firejail's
x11 * options. But note that Firefox is currently being ported to run on Wayland natively, so this option will become unreliable at some point in the future.

Finally: If you launch Firefox with the -no-remote option and use whitelisting for xpdf, for example something like this:

include /etc/firejail/whitelist-common.inc
whitelist ~/.xpdfrc
whitelist ~/path/to/your/pdf

clicking on a pdf link should get you a clean second Firefox instance that runs inside the xpdf sandbox.

@smitsohu commented on GitHub (Sep 24, 2017): Still assuming you run Firefox some more possibilities to approach this: - Running Firefox with `-no-remote` option will stop this behavior. Equally, you can put `export MOZ_NO_REMOTE=1` in ~/.xsessionrc (or wherever you configure your X session), or place `env MOZ_NO_REMOTE=1` inside /etc/firejail/firefox.local. - What should also work is isolating xpdf (or Firefox) from your main X session by means of Firejail's `x11 *` options. But note that Firefox is currently being ported to run on Wayland natively, so this option will become unreliable at some point in the future. Finally: If you launch Firefox with the `-no-remote` option and use whitelisting for xpdf, for example something like this: ``` include /etc/firejail/whitelist-common.inc whitelist ~/.xpdfrc whitelist ~/path/to/your/pdf ``` clicking on a pdf link should get you a clean second Firefox instance that runs inside the xpdf sandbox.

gitea-mirror commented

2026-05-05 07:21:43 -06:00

Author

Owner

@jockerz commented on GitHub (Sep 25, 2017):

Hi @smitsohu.
Thank you.

Solve this problem by adding --no-remote to run Firefox.

@jockerz commented on GitHub (Sep 25, 2017): Hi @smitsohu. Thank you. Solve this problem by adding `--no-remote` to run Firefox.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1046

No description provided.

Rows
Columns