[GH-ISSUE #2332] Can exclude individual Wine application from banned Internet connection of Wine default profile ? #1555

Open
opened 2026-05-05 08:13:00 -06:00 by gitea-mirror · 2 comments
Owner

Originally created by @Nokia808 on GitHub (Jan 10, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2332

Hi. Recently Wine land on Fedora repositories which is very nice .....

I would like to ask this question:
I installed WineHQ on my OS. I sandbox WineHQ by Firejail. I run many Windows game on WineHQ. Default WineHQ is blocking Windows applications that run on Wine, blocking them from connect to Internet.

Blocking from Internet is excellent feature in default WineHQ profile, & is a must. However, certain games need Internet because it have "multi-players" option that involve play with other user ONLINE. Here is the problem .....

So, is there a way to exclude individual Windows application(s) that run on WineHQ from "blocked from Internet connection" feature ? This is not only significant for game but for other applications like Skype windows version ........

Originally created by @Nokia808 on GitHub (Jan 10, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/2332 Hi. Recently Wine land on Fedora repositories which is very nice ..... I would like to ask this question: I installed WineHQ on my OS. I sandbox WineHQ by Firejail. I run many Windows game on WineHQ. Default WineHQ is blocking Windows applications that run on Wine, blocking them from connect to Internet. Blocking from Internet is excellent feature in default WineHQ profile, & is a must. However, certain games need Internet because it have "multi-players" option that involve play with other user ONLINE. Here is the problem ..... So, is there a way to exclude individual Windows application(s) that run on WineHQ from "blocked from Internet connection" feature ? This is not only significant for game but for other applications like Skype windows version ........
Author
Owner

@Vincent43 commented on GitHub (Jan 10, 2019):

You may prefix application command to run with firejail --ignore=<option you use to block network>

So instead of
Exec=wine app.exe
Run
Exec=firejail --ignore=<option you use to block network> wine app.exe

<!-- gh-comment-id:453078392 --> @Vincent43 commented on GitHub (Jan 10, 2019): You may prefix application command to run with `firejail --ignore=<option you use to block network>` So instead of `Exec=wine app.exe` Run `Exec=firejail --ignore=<option you use to block network> wine app.exe`
Author
Owner

@rusty-snake commented on GitHub (Jan 11, 2019):

Because you can't use long options in .desktop files (as I know) you can do:
Exec=sh -c 'firejail --ignore=<option you use to block network> wine app.exe'

<!-- gh-comment-id:453587326 --> @rusty-snake commented on GitHub (Jan 11, 2019): Because you can't use long options in .desktop files (as I know) you can do: `Exec=sh -c 'firejail --ignore=<option you use to block network> wine app.exe'`
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1555
No description provided.