[GH-ISSUE #2206] Firejail "breaks" ranger #1477

Closed
opened 2026-05-05 08:08:36 -06:00 by gitea-mirror · 4 comments
Owner

Originally created by @qazip on GitHub (Oct 19, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2206

I am using the latest version of ranger and I create a symbolic link with firecfg.

firejail version 0.9.56

Compile time support:
	- AppArmor support is disabled
	- AppImage support is enabled
	- chroot support is enabled
	- file and directory whitelisting support is enabled
	- file transfer support is enabled
	- networking support is enabled
	- overlayfs support is enabled
	- private-home support is enabled
	- seccomp-bpf support is enabled
	- user namespace support is enabled
	- X11 sandboxing support is enabled

When using ranger (firejailed) and opening a .mkv file from inside ranger (it opens mpv) there is no sound in mpv. Also, mpv is not properly detached so when closing ranger, mpv is also closed. Both this things do not happen when ranger is not firejailed.

Originally created by @qazip on GitHub (Oct 19, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/2206 I am using the latest version of ranger and I create a symbolic link with firecfg. ``` firejail version 0.9.56 Compile time support: - AppArmor support is disabled - AppImage support is enabled - chroot support is enabled - file and directory whitelisting support is enabled - file transfer support is enabled - networking support is enabled - overlayfs support is enabled - private-home support is enabled - seccomp-bpf support is enabled - user namespace support is enabled - X11 sandboxing support is enabled ``` When using ranger (firejailed) and opening a .mkv file from inside ranger (it opens mpv) there is no sound in mpv. Also, mpv is not properly detached so when closing ranger, mpv is also closed. Both this things do not happen when ranger is not firejailed.
Author
Owner

@Fred-Barclay commented on GitHub (Oct 19, 2018):

Hi @qazip
Can you try starting ranger with firejail --nosound ranger and seeing if the sound works?

About detaching mpv... that could be a little problematic. Allowing mpv to detach from firejailed ranger, so to speak, would really mean that mpv can escape the sandbox... but then that means malicious programs might as well. I don't think there's a way around this.

<!-- gh-comment-id:431512638 --> @Fred-Barclay commented on GitHub (Oct 19, 2018): Hi @qazip Can you try starting ranger with `firejail --nosound ranger` and seeing if the sound works? About detaching mpv... that could be a little problematic. Allowing mpv to detach from firejailed ranger, so to speak, would really mean that mpv can escape the sandbox... but then that means malicious programs might as well. I don't think there's a way around this.
Author
Owner

@SkewedZeppelin commented on GitHub (Oct 19, 2018):

See #1261

Sandboxing of file managers and desktop environments are not meant to be supported outside of very specific use cases.

<!-- gh-comment-id:431517677 --> @SkewedZeppelin commented on GitHub (Oct 19, 2018): See #1261 Sandboxing of file managers and desktop environments are not meant to be supported outside of very specific use cases.
Author
Owner

@qazip commented on GitHub (Oct 20, 2018):

@Fred-Barclay, that doesn't work, but commenting nosound on the profile does work. Sadly, I was more looking into the detachment problem. It's unfortunate that it is not possible..

<!-- gh-comment-id:431553145 --> @qazip commented on GitHub (Oct 20, 2018): @Fred-Barclay, that doesn't work, but commenting nosound on the profile does work. Sadly, I was more looking into the detachment problem. It's unfortunate that it is not possible..
Author
Owner

@veloute commented on GitHub (Nov 24, 2018):

this commit should close this issue 95a8e4fb23

<!-- gh-comment-id:441392324 --> @veloute commented on GitHub (Nov 24, 2018): this commit should close this issue https://github.com/netblue30/firejail/commit/95a8e4fb23a2855b1dd0a83a041354f2b109ef60
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1477
No description provided.