[GH-ISSUE #2692] Atom ain't sandboxed #1693

Closed
opened 2026-05-05 08:20:46 -06:00 by gitea-mirror · 13 comments
Owner

Originally created by @CodeArtisan00 on GitHub (May 12, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2692

Specs- Manjaro(KDE): kernel-4.19.36-1, Firejail-0.9.58.2-1, Atom-1.36.0-2

When I try to run atom from context menu,desktop or menubar, atom is not sanboxed though firejail has already made symlink. Firejail atom does sandbox atom though. How can I fix it?

Originally created by @CodeArtisan00 on GitHub (May 12, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/2692 Specs- Manjaro(KDE): kernel-4.19.36-1, Firejail-0.9.58.2-1, Atom-1.36.0-2 When I try to run atom from context menu,desktop or menubar, atom is not sanboxed though firejail has already made symlink. Firejail atom does sandbox atom though. How can I fix it?
Author
Owner

@SkewedZeppelin commented on GitHub (May 12, 2019):

atom.desktop has a hardcoded exec line as Exec=env /usr/bin/atom
did you run firecfg --fix? if so, maybe firecfg can't handle Exec with extra bits like that

<!-- gh-comment-id:491629213 --> @SkewedZeppelin commented on GitHub (May 12, 2019): atom.desktop has a hardcoded exec line as `Exec=env /usr/bin/atom` did you run `firecfg --fix`? if so, maybe firecfg can't handle `Exec` with extra bits like that
Author
Owner

@CodeArtisan00 commented on GitHub (May 13, 2019):

did you run firecfg --fix? if so, maybe firecfg can't handle Exec with extra bits like that

yup... firecfg --fix didn't fix it... so there is no way to resolve it,at this moment

<!-- gh-comment-id:491714733 --> @CodeArtisan00 commented on GitHub (May 13, 2019): > did you run `firecfg --fix`? if so, maybe firecfg can't handle `Exec` with extra bits like that yup... firecfg --fix didn't fix it... so there is no way to resolve it,at this moment
Author
Owner

@SkewedZeppelin commented on GitHub (May 13, 2019):

You can manually copy /usr/share/applications/atom.desktop to ~/.local/share/applcations
and edit the Exec line to be Exec=atom

<!-- gh-comment-id:491780361 --> @SkewedZeppelin commented on GitHub (May 13, 2019): You can manually copy `/usr/share/applications/atom.desktop` to `~/.local/share/applcations` and edit the `Exec` line to be `Exec=atom`
Author
Owner

@CodeArtisan00 commented on GitHub (May 14, 2019):

didn't work...

<!-- gh-comment-id:492149487 --> @CodeArtisan00 commented on GitHub (May 14, 2019): didn't work...
Author
Owner

@chiraag-nataraj commented on GitHub (May 20, 2019):

@Neo00001 Can you do a which atom?

<!-- gh-comment-id:494034487 --> @chiraag-nataraj commented on GitHub (May 20, 2019): @Neo00001 Can you do a `which atom`?
Author
Owner

@matu3ba commented on GitHub (May 20, 2019):

Same issue with surf for default path.
For the firecfg output: A hint to fix the binary location (and the options where to place it exactly) would be useful.

<!-- gh-comment-id:494049245 --> @matu3ba commented on GitHub (May 20, 2019): Same issue with [surf](https://surf.suckless.org/) for default path. For the firecfg output: A hint to fix the binary location (and the options where to place it exactly) would be useful.
Author
Owner

@chiraag-nataraj commented on GitHub (May 21, 2019):

How are you installing surf though? At least in the default Debian package, it doesn't come with a .desktop file...

<!-- gh-comment-id:494404674 --> @chiraag-nataraj commented on GitHub (May 21, 2019): How are you installing `surf` though? At least in the default Debian package, it doesn't come with a `.desktop` file...
Author
Owner

@chiraag-nataraj commented on GitHub (May 21, 2019):

Also, @Neo00001, you should file a bug at https://github.com/atom/atom/issues to tell them to stop using the absolute path in the desktop file.

<!-- gh-comment-id:494407614 --> @chiraag-nataraj commented on GitHub (May 21, 2019): Also, @Neo00001, you should file a bug at https://github.com/atom/atom/issues to tell them to stop using the absolute path in the desktop file.
Author
Owner

@chiraag-nataraj commented on GitHub (May 28, 2019):

@Neo00001 What is the output of which atom?
@matu3ba How are you installing surf? As I remarked in my previous comment, the version of surf I can install doesn't come with a .desktop file, which is what we're talking about here. Does your version of surf come with a .desktop file (menu entry)?

<!-- gh-comment-id:496648268 --> @chiraag-nataraj commented on GitHub (May 28, 2019): @Neo00001 What is the output of `which atom`? @matu3ba How are you installing `surf`? As I remarked in my previous comment, the version of `surf` I can install doesn't come with a `.desktop` file, which is what we're talking about here. Does your version of `surf` come with a `.desktop` file (menu entry)?
Author
Owner

@matu3ba commented on GitHub (May 28, 2019):

@chiraag-nataraj Yes, for a packaged surf that is the case.

<!-- gh-comment-id:496665428 --> @matu3ba commented on GitHub (May 28, 2019): @chiraag-nataraj Yes, for a packaged surf that is the case.
Author
Owner

@chiraag-nataraj commented on GitHub (May 28, 2019):

@matu3ba, which distribution are you running?

<!-- gh-comment-id:496704960 --> @chiraag-nataraj commented on GitHub (May 28, 2019): @matu3ba, which distribution are you running?
Author
Owner

@CodeArtisan00 commented on GitHub (May 28, 2019):

@Neo00001 What is the output of which atom?

Sorry,man. But I've uninstalled atom long ago & don't have any intention to re-install it again.

<!-- gh-comment-id:496706434 --> @CodeArtisan00 commented on GitHub (May 28, 2019): > @Neo00001 What is the output of `which atom`? Sorry,man. But I've uninstalled atom long ago & don't have any intention to re-install it again.
Author
Owner

@chiraag-nataraj commented on GitHub (May 28, 2019):

@Neo00001 🤷‍♂️ Okay, I guess I'll close this for now. If you ever start using it again (or if someone else is running into this), please feel free to re-open.

@matu3ba, please open a new issue with more details and we can figure it out there, thanks!

<!-- gh-comment-id:496707079 --> @chiraag-nataraj commented on GitHub (May 28, 2019): @Neo00001 :man_shrugging: Okay, I guess I'll close this for now. If you ever start using it again (or if someone else is running into this), please feel free to re-open. @matu3ba, please open a new issue with more details and we can figure it out there, thanks!
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1693
No description provided.