mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #2219] [Documentation] How to utilize FireJail with Wine #1490
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#1490
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @asdfghjz on GitHub (Oct 28, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2219
Question: How to utilize FireJail with Wine?
@Vincent43 commented on GitHub (Oct 28, 2018):
The same way as any other app. Instead of
wine *.exeusefirejail wine *.exefrom console or edit wine app launcher and addfirejailprefix. The defaultwineprofile is here: https://github.com/netblue30/firejail/blob/master/etc/wine.profile@asdfghjz commented on GitHub (Oct 28, 2018):
@Vincent43 Ahh, ok. Thanks!
@asdfghjz commented on GitHub (Oct 29, 2018):
@Vincent43 Are there any security/privacy vulnerabilities with utilizing the default wine profile?
@Vincent43 commented on GitHub (Oct 29, 2018):
The default profile uses blacklists which should block access to common sensitive files but may be not tailored to your specific system if you store important files in various non-standard locations.
To use whitelists you may add:
plus other
/homedirectories you want to access in/etc/firejail/wine.localfile (you may need to create it).It also allows network access, if you don't want it then you may add
--net=noneoption after firejail, i.e.firejail --net=none wine *.exein launcher/console or add it towine.localas described above.@ghost commented on GitHub (Mar 17, 2021):
Sorry to open this issue, but I cannot get it working with wine. For example. I installed Abelton Live 11 trial on Linux using wine. The installation created an entry in my applicaton menu like this:
env WINEPREFIX="/home/castle/.wine" wine C:\\windows\\command\\start.exe /Unix /home/castle/.wine/dosdevices/c:/users/castle/Start\ Menu/Programs/Ableton\ Live\ 11\ Suite.lnkI add firejail --net=none like this:
env WINEPREFIX="/home/castle/.wine" firejail --net=none wine C:\\windows\\command\\start.exe /Unix /home/castle/.wine/dosdevices/c:/users/castle/Start\ Menu/Programs/Ableton\ Live\ 11\ Suite.lnkHowever the Ableton still connects to the Internet. Am I missing something?
@rusty-snake commented on GitHub (Mar 18, 2021):
First make sure that the program is really running in firejail (
firejail --list). If that's the case, try to disable D-Bus access (dbus-user noneanddbus-system none). Maybe that's help.@madprops commented on GitHub (Mar 8, 2022):
Just to update the location of the wine.profile, since it moved:
https://github.com/netblue30/firejail/blob/master/etc/profile-m-z/wine.profile