github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #2667] playonlinux + wine + firejail #1682

New issue

Closed

opened 2026-05-05 08:19:43 -06:00 by gitea-mirror · 4 comments

gitea-mirror commented

2026-05-05 08:19:43 -06:00

Owner

Originally created by @tinmanx on GitHub (Apr 27, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2667

Question 1: how exactly would you run firejail with playonlinux when wine is being run by playonlinux? Do you need to also configure the wine executable with firejail if only using playonlinux?

Question 2: @Vincent43 you mention here https://github.com/netblue30/firejail/issues/2219#issuecomment-434025708 that the default profile uses blacklists for wine and should use them if you store important files in various non-standard locations, so for example you would need to blacklist a location such as /media since it wouldnt be included?
Why isnt everything blacklisted by default and only whitelist what you want?

Originally created by @tinmanx on GitHub (Apr 27, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/2667 Question 1: how exactly would you run firejail with playonlinux when wine is being run by playonlinux? Do you need to also configure the wine executable with firejail if only using playonlinux? Question 2: @Vincent43 you mention here https://github.com/netblue30/firejail/issues/2219#issuecomment-434025708 that the default profile uses blacklists for wine and should use them if you store important files in various non-standard locations, so for example you would need to blacklist a location such as /media since it wouldnt be included? Why isnt everything blacklisted by default and only whitelist what you want?

gitea-mirror

2026-05-05 08:19:43 -06:00

closed this issue
added the
question_old
label

gitea-mirror commented

2026-05-05 08:19:46 -06:00

Author

Owner

@rusty-snake commented on GitHub (Apr 27, 2019):

playonlinux has a profile, so firejail playonlinux is enough. Or after you ran sudo firecfg you can just run playonlinux.

@rusty-snake commented on GitHub (Apr 27, 2019): 1. playonlinux has a [profile](https://github.com/netblue30/firejail/blob/master/etc/playonlinux.profile), so `firejail playonlinux` is enough. Or after you ran `sudo firecfg` you can just run `playonlinux`.

gitea-mirror commented

2026-05-05 08:19:47 -06:00

Author

Owner

@rusty-snake commented on GitHub (Apr 27, 2019):

In firejail you need to different between noblacklist and whitelist

Why isnt everything blacklisted by default and only whitelist what you want?

That would mean that the user muss interact with it so that it's work. IMHO it is better if it work out-of-the-box and the user can interact for more security.

@rusty-snake commented on GitHub (Apr 27, 2019): In firejail you need to different between noblacklist and whitelist > Why isnt everything blacklisted by default and only whitelist what you want? That would mean that the user muss interact with it so that it's work. IMHO it is better if it work out-of-the-box and the user can interact for more security.

gitea-mirror commented

2026-05-05 08:19:48 -06:00

Author

Owner

@Vincent43 commented on GitHub (Apr 27, 2019):

It would be nice to use a whitelist for only specific elements by default but wine is quite special - it can run unlimited number of apps and it's hard to predict what they need to access (all XDG dirs at minimum I guess). Still I recommend to use whitelist locally and adjust it for your environment.

@Vincent43 commented on GitHub (Apr 27, 2019): It would be nice to use a whitelist for only specific elements by default but wine is quite special - it can run unlimited number of apps and it's hard to predict what they need to access (all XDG dirs at minimum I guess). Still I recommend to use whitelist locally and adjust it for your environment.

gitea-mirror commented

2026-05-05 08:19:50 -06:00

Author

Owner

@rusty-snake commented on GitHub (Jun 26, 2019):

@tinmanx I'm going to close this for now because of inactivity. Please fell free to reopen if you have more questions.

@rusty-snake commented on GitHub (Jun 26, 2019): @tinmanx I'm going to close this for now because of inactivity. Please fell free to reopen if you have more questions.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1682

No description provided.

Rows
Columns