github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #2629] Question about Desktop Integration #1663

New issue

Closed

opened 2026-05-05 08:18:40 -06:00 by gitea-mirror · 4 comments

gitea-mirror commented

2026-05-05 08:18:40 -06:00

Owner

Originally created by @FOSSONLY on GitHub (Mar 30, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2629

According to the man page, it is specified that desktop integration covers, among other things, the execution of files using the icon.

But also all common file managers are isolated by default. That should mean that everything that is executed via file manager should be isolated (via dolphin.profile for example), and therefore also unknown programs without profile? Or is this a thinking error?

Originally created by @FOSSONLY on GitHub (Mar 30, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/2629 According to the man page, it is specified that desktop integration covers, among other things, the execution of files using the icon. But also all common file managers are isolated by default. That should mean that everything that is executed via file manager should be isolated (via dolphin.profile for example), and therefore also unknown programs without profile? Or is this a thinking error?

gitea-mirror

2026-05-05 08:18:40 -06:00

closed this issue
added the
question_old
label

gitea-mirror commented

2026-05-05 08:18:43 -06:00

Author

Owner

@rusty-snake commented on GitHub (Mar 30, 2019):

Nope, you can see witch programms are firejailed by default, when you run firecfg there are PROGRAMM created lines. If you want to look at it again later you can run ls -l /usr/local/bin every symlink to firejail is an programm that will be executed by default with firejail.

firecfg also does .desktop files fixes that have Exec=/bin/PROGRAMM or DBusActivatable=true (but it have a bug #2624).

Besides: the most filemanagers aren't firejailed by default (but have a profile). You can manualy firejail every programm by default by running sudo ln -s /usr/bin/firejail /usr/local/bin/PROGRAMM

@rusty-snake commented on GitHub (Mar 30, 2019): Nope, you can see witch programms are firejailed by default, when you run firecfg there are `PROGRAMM created` lines. If you want to look at it again later you can run `ls -l /usr/local/bin` every symlink to firejail is an programm that will be executed by default with firejail. firecfg also does .desktop files fixes that have `Exec=/bin/PROGRAMM` or `DBusActivatable=true` (but it have a bug #2624). Besides: the most filemanagers aren't firejailed by default (but have a profile). You can manualy firejail every programm by default by running `sudo ln -s /usr/bin/firejail /usr/local/bin/PROGRAMM`

gitea-mirror commented

2026-05-05 08:18:44 -06:00

Author

Owner

@SkewedZeppelin commented on GitHub (Mar 30, 2019):

See #1261 for reasoning as to why file managers are not sandboxed by default.

@SkewedZeppelin commented on GitHub (Mar 30, 2019): See #1261 for reasoning as to why file managers are not sandboxed by default.

gitea-mirror commented

2026-05-05 08:18:46 -06:00

Author

Owner

@curiosity-seeker commented on GitHub (Apr 20, 2019):

Applications are also often unsandboxed if they are referenced in an application as helper applications by using their full path. Which means that their symlinks in /usr/local/bin are bypassed. Example: krusader

@curiosity-seeker commented on GitHub (Apr 20, 2019): Applications are also often unsandboxed if they are referenced in an application as helper applications by using their full path. Which means that their symlinks in /usr/local/bin are bypassed. Example: krusader

gitea-mirror commented

2026-05-05 08:18:47 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (May 21, 2019):

Seems like the question was answered, so lemme close this. @FOSSONLY, please feel free to re-open if you have further questions.

@chiraag-nataraj commented on GitHub (May 21, 2019): Seems like the question was answered, so lemme close this. @FOSSONLY, please feel free to re-open if you have further questions.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1663

No description provided.

Rows
Columns