[GH-ISSUE #2219] [Documentation] How to utilize FireJail with Wine #1490

Closed
opened 2026-05-05 08:09:30 -06:00 by gitea-mirror · 7 comments
Owner

Originally created by @asdfghjz on GitHub (Oct 28, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2219

Question: How to utilize FireJail with Wine?

Originally created by @asdfghjz on GitHub (Oct 28, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/2219 **Question:** How to utilize FireJail with [Wine](https://www.winehq.org/)?
Author
Owner

@Vincent43 commented on GitHub (Oct 28, 2018):

The same way as any other app. Instead of wine *.exe use firejail wine *.exe from console or edit wine app launcher and add firejail prefix. The default wine profile is here: https://github.com/netblue30/firejail/blob/master/etc/wine.profile

<!-- gh-comment-id:433705447 --> @Vincent43 commented on GitHub (Oct 28, 2018): The same way as any other app. Instead of `wine *.exe` use `firejail wine *.exe` from console or edit wine app launcher and add `firejail` prefix. The default `wine` profile is here: https://github.com/netblue30/firejail/blob/master/etc/wine.profile
Author
Owner

@asdfghjz commented on GitHub (Oct 28, 2018):

@Vincent43 Ahh, ok. Thanks!

<!-- gh-comment-id:433733854 --> @asdfghjz commented on GitHub (Oct 28, 2018): @Vincent43 Ahh, ok. Thanks!
Author
Owner

@asdfghjz commented on GitHub (Oct 29, 2018):

@Vincent43 Are there any security/privacy vulnerabilities with utilizing the default wine profile?

<!-- gh-comment-id:434008676 --> @asdfghjz commented on GitHub (Oct 29, 2018): @Vincent43 Are there any security/privacy vulnerabilities with utilizing the default wine profile?
Author
Owner

@Vincent43 commented on GitHub (Oct 29, 2018):

The default profile uses blacklists which should block access to common sensitive files but may be not tailored to your specific system if you store important files in various non-standard locations.

To use whitelists you may add:

include /etc/firejail/whitelist-common.inc
whitelist ${HOME}/.wine
whitelist ${HOME}/.local/share/wineprefixes

plus other /home directories you want to access in /etc/firejail/wine.local file (you may need to create it).

It also allows network access, if you don't want it then you may add --net=none option after firejail, i.e. firejail --net=none wine *.exe in launcher/console or add it to wine.local as described above.

<!-- gh-comment-id:434025708 --> @Vincent43 commented on GitHub (Oct 29, 2018): The default profile uses blacklists which should block access to common sensitive files but may be not tailored to your specific system if you store important files in various non-standard locations. To use whitelists you may add: ``` include /etc/firejail/whitelist-common.inc whitelist ${HOME}/.wine whitelist ${HOME}/.local/share/wineprefixes ``` plus other `/home` directories you want to access in `/etc/firejail/wine.local` file (you may need to create it). It also allows network access, if you don't want it then you may add `--net=none` option after firejail, i.e. `firejail --net=none wine *.exe` in launcher/console or add it to `wine.local` as described above.
Author
Owner

@ghost commented on GitHub (Mar 17, 2021):

Sorry to open this issue, but I cannot get it working with wine. For example. I installed Abelton Live 11 trial on Linux using wine. The installation created an entry in my applicaton menu like this:

env WINEPREFIX="/home/castle/.wine" wine C:\\windows\\command\\start.exe /Unix /home/castle/.wine/dosdevices/c:/users/castle/Start\ Menu/Programs/Ableton\ Live\ 11\ Suite.lnk

I add firejail --net=none like this:

env WINEPREFIX="/home/castle/.wine" firejail --net=none wine C:\\windows\\command\\start.exe /Unix /home/castle/.wine/dosdevices/c:/users/castle/Start\ Menu/Programs/Ableton\ Live\ 11\ Suite.lnk

However the Ableton still connects to the Internet. Am I missing something?

<!-- gh-comment-id:801483254 --> @ghost commented on GitHub (Mar 17, 2021): Sorry to open this issue, but I cannot get it working with wine. For example. I installed Abelton Live 11 trial on Linux using wine. The installation created an entry in my applicaton menu like this: `env WINEPREFIX="/home/castle/.wine" wine C:\\windows\\command\\start.exe /Unix /home/castle/.wine/dosdevices/c:/users/castle/Start\ Menu/Programs/Ableton\ Live\ 11\ Suite.lnk` I add firejail --net=none like this: `env WINEPREFIX="/home/castle/.wine" firejail --net=none wine C:\\windows\\command\\start.exe /Unix /home/castle/.wine/dosdevices/c:/users/castle/Start\ Menu/Programs/Ableton\ Live\ 11\ Suite.lnk` However the Ableton still connects to the Internet. Am I missing something?
Author
Owner

@rusty-snake commented on GitHub (Mar 18, 2021):

First make sure that the program is really running in firejail (firejail --list). If that's the case, try to disable D-Bus access (dbus-user none and dbus-system none). Maybe that's help.

<!-- gh-comment-id:802126579 --> @rusty-snake commented on GitHub (Mar 18, 2021): First make sure that the program is really running in firejail (`firejail --list`). If that's the case, try to disable D-Bus access (`dbus-user none` and `dbus-system none`). Maybe that's help.
Author
Owner

@madprops commented on GitHub (Mar 8, 2022):

Just to update the location of the wine.profile, since it moved:

https://github.com/netblue30/firejail/blob/master/etc/profile-m-z/wine.profile

<!-- gh-comment-id:1061647762 --> @madprops commented on GitHub (Mar 8, 2022): Just to update the location of the wine.profile, since it moved: https://github.com/netblue30/firejail/blob/master/etc/profile-m-z/wine.profile
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1490
No description provided.