github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #1889] ExpressVPN internet issues (resolv.conf) #1270

New issue

Closed

opened 2026-05-05 07:45:39 -06:00 by gitea-mirror · 5 comments

gitea-mirror commented

2026-05-05 07:45:39 -06:00

Owner

Originally created by @vguarnaccia on GitHub (Apr 15, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1889

Not sure if this is the best place to post this but I had an issue with the internet when using Firejail in conjunction with ExpressVPN.

After much troubling shooting, I realize it's because ExpressVPN symlinks /etc/resolv.conf -> /var/lib/expressvpn/resolv.conf. Ergo, I have to add whitelist /var/lib/expressvpn/resolv.conf to whitelist-var-common.local.

Originally created by @vguarnaccia on GitHub (Apr 15, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/1889 Not sure if this is the best place to post this but I had an issue with the internet when using Firejail in conjunction with ExpressVPN. After much troubling shooting, I realize it's because ExpressVPN symlinks `/etc/resolv.conf` -> `/var/lib/expressvpn/resolv.conf`. Ergo, I have to add `whitelist /var/lib/expressvpn/resolv.conf` to `whitelist-var-common.local`.

gitea-mirror

2026-05-05 07:45:39 -06:00

closed this issue
added the
networking
label

gitea-mirror commented

2026-05-05 07:45:43 -06:00

Author

Owner

@vguarnaccia commented on GitHub (Apr 20, 2018):

In order to use the browser plugin, one should whitelist all of /var/lib/expressvpn/.

@vguarnaccia commented on GitHub (Apr 20, 2018): In order to use the browser plugin, one should whitelist all of `/var/lib/expressvpn/`.

gitea-mirror commented

2026-05-05 07:45:45 -06:00

Author

Owner

@SkewedZeppelin commented on GitHub (Apr 22, 2018):

If at all possible I'd recommend you instead use the native/real clients directly instead of using a wrapper as provided. ie. use OpenVPN or the NetworkManager VPN modules instead of the VPN providers program.

@SkewedZeppelin commented on GitHub (Apr 22, 2018): If at all possible I'd recommend you instead use the native/real clients directly instead of using a wrapper as provided. ie. use OpenVPN or the NetworkManager VPN modules instead of the VPN providers program.

gitea-mirror commented

2026-05-05 07:45:46 -06:00

Author

Owner

@vguarnaccia commented on GitHub (Apr 22, 2018):

Do you think I should do so for security or performance reasons?

Thanks for replying.

@vguarnaccia commented on GitHub (Apr 22, 2018): Do you think I should do so for security or performance reasons? Thanks for replying.

gitea-mirror commented

2026-05-05 07:45:47 -06:00

Author

Owner

@SkewedZeppelin commented on GitHub (Apr 22, 2018):

Assuming for example that it is just an (potentially outdated) OpenVPN client + wrapper:

Security: Newer versions might have more bugfixes.
Performance: Newer versions might have more optimizations
Privacy: You don't necessarily know what else the client might be doing
Your distro's version might also have more aggressive compiler options set which can be more secure (-fstack -fpie -fpic) and/or more performant (-O3)
etc.

at the same time the wrapper might be making extra changes to ensure that it is correctly working (ie. no dns leaks)

you gain some you lose some 😀

@SkewedZeppelin commented on GitHub (Apr 22, 2018): Assuming for example that it is just an (potentially outdated) OpenVPN client + wrapper: Security: Newer versions might have more bugfixes. Performance: Newer versions might have more optimizations Privacy: You don't necessarily know what else the client might be doing Your distro's version might also have more aggressive compiler options set which can be more secure (-fstack -fpie -fpic) and/or more performant (-O3) etc. at the same time the wrapper might be making extra changes to ensure that it is correctly working (ie. no dns leaks) you gain some you lose some :grinning:

gitea-mirror commented

2026-05-05 07:45:49 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (May 2, 2018):

@SkewedZeppelin Completely OT, but this is why I've set up a mini router which sets up my VPN and ensures there are no DNS leaks and stuff. That way, I just let my laptop connect as normal without VPN. As a side bonus, anything which connects to the hotspot goes through the VPN :D

@chiraag-nataraj commented on GitHub (May 2, 2018): @SkewedZeppelin Completely OT, but this is why I've set up a mini router which sets up my VPN and ensures there are no DNS leaks and stuff. That way, I just let my laptop connect as normal without VPN. As a side bonus, anything which connects to the hotspot goes through the VPN :D

gitea-mirror referenced this issue

2026-05-05 10:10:06 -06:00

[PR #1270] [MERGED] completing noexec #3906

gitea-mirror referenced this issue

2026-05-05 10:10:21 -06:00

[PR #1315] [CLOSED] pulseaudio with whitelisting #3917

gitea-mirror referenced this issue

2026-05-05 10:10:40 -06:00

[PR #1380] [CLOSED] tidy up of disable-common.inc #3936