mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #2519] Many firejails aren't whitelisting /home/downloads/ #1638
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#1638
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Futureknows on GitHub (Mar 6, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2519
Several generic profiles (VLC, PIX) have become unable to access files in my /home/downloads/ folder. For instance if I try to launch a video in /home/ with VLC it can't access the directory. If I launch VLC without firejail it works as expected. Firefox works as expected in firejail..
I think some permissions got mucked up but I did a full Firejail scrub and reinstall from git.
Any clues?
@SkewedZeppelin commented on GitHub (Mar 6, 2019):
Is your Downloads folder named "Downloads", "Загрузки", "Téléchargement" or defined in your ~/.config/user-dirs.dirs?
@Futureknows commented on GitHub (Mar 6, 2019):
Yes "Downloads",
XDG_DOWNLOAD_DIR="$HOME/Downloads"I had to restore r/w permissions to home after a Timeshift, I believe this has to do with permissions but only occurs in certain firejails. Globals are default. When I use firestats to explore the file system of those FJs, it shows Download's permissions as root although firejail is running as user with full permissions.
@FOSSONLY commented on GitHub (Mar 7, 2019):
Hm.. it looks like these profiles lacking an "whitelist ${DOWNLOADS}" entry.
@Futureknows commented on GitHub (Mar 7, 2019):
OK, I manually whitelisted using
whitelist ${DOWNLOADS}@SkewedZeppelin commented on GitHub (Mar 7, 2019):
VLC and PIX don't have downloads whitelisted because they aren't whitelist profiles. Did you add a whitelist command to your globals or local?