[GH-ISSUE #2519] Many firejails aren't whitelisting /home/downloads/ #1638

Closed
opened 2026-05-05 08:17:23 -06:00 by gitea-mirror · 5 comments
Owner

Originally created by @Futureknows on GitHub (Mar 6, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2519

Several generic profiles (VLC, PIX) have become unable to access files in my /home/downloads/ folder. For instance if I try to launch a video in /home/ with VLC it can't access the directory. If I launch VLC without firejail it works as expected. Firefox works as expected in firejail..

I think some permissions got mucked up but I did a full Firejail scrub and reinstall from git.
Any clues?

Originally created by @Futureknows on GitHub (Mar 6, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/2519 Several generic profiles (VLC, PIX) have become unable to access files in my /home/downloads/ folder. For instance if I try to launch a video in /home/ with VLC it can't access the directory. If I launch VLC without firejail it works as expected. Firefox works as expected in firejail.. I think some permissions got mucked up but I did a full Firejail scrub and reinstall from git. Any clues?
Author
Owner

@SkewedZeppelin commented on GitHub (Mar 6, 2019):

Is your Downloads folder named "Downloads", "Загрузки", "Téléchargement" or defined in your ~/.config/user-dirs.dirs?

<!-- gh-comment-id:469950322 --> @SkewedZeppelin commented on GitHub (Mar 6, 2019): Is your Downloads folder named "Downloads", "Загрузки", "Téléchargement" or defined in your ~/.config/user-dirs.dirs?
Author
Owner

@Futureknows commented on GitHub (Mar 6, 2019):

Yes "Downloads", XDG_DOWNLOAD_DIR="$HOME/Downloads"
I had to restore r/w permissions to home after a Timeshift, I believe this has to do with permissions but only occurs in certain firejails. Globals are default. When I use firestats to explore the file system of those FJs, it shows Download's permissions as root although firejail is running as user with full permissions.

<!-- gh-comment-id:470212442 --> @Futureknows commented on GitHub (Mar 6, 2019): Yes "Downloads", `XDG_DOWNLOAD_DIR="$HOME/Downloads"` I had to restore r/w permissions to home after a Timeshift, I believe this has to do with permissions but only occurs in certain firejails. Globals are default. When I use firestats to explore the file system of those FJs, it shows Download's permissions as root although firejail is running as user with full permissions.
Author
Owner

@FOSSONLY commented on GitHub (Mar 7, 2019):

Hm.. it looks like these profiles lacking an "whitelist ${DOWNLOADS}" entry.

<!-- gh-comment-id:470357917 --> @FOSSONLY commented on GitHub (Mar 7, 2019): Hm.. it looks like these profiles lacking an "whitelist ${DOWNLOADS}" entry.
Author
Owner

@Futureknows commented on GitHub (Mar 7, 2019):

OK, I manually whitelisted using whitelist ${DOWNLOADS}

<!-- gh-comment-id:470388257 --> @Futureknows commented on GitHub (Mar 7, 2019): OK, I manually whitelisted using `whitelist ${DOWNLOADS}`
Author
Owner

@SkewedZeppelin commented on GitHub (Mar 7, 2019):

VLC and PIX don't have downloads whitelisted because they aren't whitelist profiles. Did you add a whitelist command to your globals or local?

<!-- gh-comment-id:470410550 --> @SkewedZeppelin commented on GitHub (Mar 7, 2019): VLC and PIX don't have downloads whitelisted because they aren't whitelist profiles. Did you add a whitelist command to your globals or local?
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1638
No description provided.