github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #2787] x11 xorg doesn't seem to respect the quiet option #1746

New issue

Closed

opened 2026-05-05 08:24:46 -06:00 by gitea-mirror · 6 comments

gitea-mirror commented

2026-05-05 08:24:46 -06:00

Owner

Originally created by @ghost on GitHub (Jun 20, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2787

Recently I started to experiment/test profiles with --audit and trying to fix anything reported as UGLY or MAYBE in .local files. This has proven to work really well. One thing I've noticed though is that x11 xorg doesn't seem to follow the quiet option. E.g. with dig (which has the quiet option in its profile):

$ firejail --audit --x11=xorg /usr/bin/dig
Using authority file /tmp/.tmpXauth-H9Pmcp
authorization id is 1624
Writing authority file /tmp/.tmpXauth-H9Pmcp
---------------- Firejail Audit: the GOOD, the BAD and the UGLY ----------------
...

Explicitly calling the quiet option on a profile that doesn't have it (e.g. claws-mail) also shows the same behavior:

$ firejail --audit --quiet --x11=xorg /usr/bin/claws-mail
Using authority file /tmp/.tmpXauth-Z9n89F
authorization id is 1532
Writing authority file /tmp/.tmpXauth-Z9n89F
---------------- Firejail Audit: the GOOD, the BAD and the UGLY ----------------
...

Is this intended (with audit)?

Originally created by @ghost on GitHub (Jun 20, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/2787 Recently I started to experiment/test profiles with `--audit` and trying to fix anything reported as `UGLY` or `MAYBE` in .local files. This has proven to work really well. One thing I've noticed though is that `x11 xorg` doesn't seem to follow the `quiet` option. E.g. with dig (which has the quiet option in its profile): ``` $ firejail --audit --x11=xorg /usr/bin/dig Using authority file /tmp/.tmpXauth-H9Pmcp authorization id is 1624 Writing authority file /tmp/.tmpXauth-H9Pmcp ---------------- Firejail Audit: the GOOD, the BAD and the UGLY ---------------- ... ``` Explicitly calling the quiet option on a profile that doesn't have it (e.g. claws-mail) also shows the same behavior: ``` $ firejail --audit --quiet --x11=xorg /usr/bin/claws-mail Using authority file /tmp/.tmpXauth-Z9n89F authorization id is 1532 Writing authority file /tmp/.tmpXauth-Z9n89F ---------------- Firejail Audit: the GOOD, the BAD and the UGLY ---------------- ... ``` Is this intended (with audit)?

gitea-mirror

2026-05-05 08:24:46 -06:00

closed this issue
added the
bug
label

gitea-mirror commented

2026-05-05 08:24:50 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (Jun 22, 2019):

Seems like those statements aren't inside a if(arg_debug), so it seems like the intention is for them to always be printed? I suppose that's up for debate though heh.

@chiraag-nataraj commented on GitHub (Jun 22, 2019): Seems like those statements aren't inside a `if(arg_debug)`, so it seems like the intention is for them to always be printed? I suppose that's up for debate though heh.

gitea-mirror commented

2026-05-05 08:24:51 -06:00

Author

Owner

@ghost commented on GitHub (Jun 22, 2019):

@chiraag-nataraj That indeed seems the intention, which I find counterintuitive in the case of quiet. I'll experiment with (arg_debug), (arg_quiet) etcetera in the code and try not to break anything.

@ghost commented on GitHub (Jun 22, 2019): @chiraag-nataraj That indeed seems the intention, which I find counterintuitive in the case of `quiet`. I'll experiment with `(arg_debug)`, `(arg_quiet)` etcetera in the [code](https://github.com/netblue30/firejail/blob/master/src/firejail/x11.c) and try not to break anything.

gitea-mirror commented

2026-05-05 08:24:52 -06:00

Author

Owner

@netblue30 commented on GitHub (Jun 24, 2019):

It shouldn't show anything on the screen, we have to clean it up. @glitsj16 give it a try.

@netblue30 commented on GitHub (Jun 24, 2019): It shouldn't show anything on the screen, we have to clean it up. @glitsj16 give it a try.

gitea-mirror commented

2026-05-05 08:24:53 -06:00

Author

Owner

@ghost commented on GitHub (Jun 24, 2019):

@netblue30 Thanks for clearing that up. I'm in the middle of an annual dance, relocating the family now school responsibilities are suspended for a couple of months. In a day or two I should have a PR ready.

@ghost commented on GitHub (Jun 24, 2019): @netblue30 Thanks for clearing that up. I'm in the middle of an annual dance, relocating the family now school responsibilities are suspended for a couple of months. In a day or two I should have a PR ready.

gitea-mirror commented

2026-05-05 08:24:54 -06:00

Author

Owner

@netblue30 commented on GitHub (Jun 25, 2019):

No problem, take your time.

@netblue30 commented on GitHub (Jun 25, 2019): No problem, take your time.

gitea-mirror commented

2026-05-05 08:24:55 -06:00

Author

Owner

@ghost commented on GitHub (Jun 26, 2019):

@netblue30 I left in the xauth output while using --debug (where it might be helpful). If this is not what you want, I can easily take out the relevant conditional in https://github.com/netblue30/firejail/blob/master/src/firejail/x11.c#L1135 and below. Hope this didn't break anything...

@ghost commented on GitHub (Jun 26, 2019): @netblue30 I left in the xauth output while using --debug (where it might be helpful). If this is not what you want, I can easily take out the relevant conditional in https://github.com/netblue30/firejail/blob/master/src/firejail/x11.c#L1135 and below. Hope this didn't break anything...

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1746

No description provided.

Rows
Columns