[GH-ISSUE #248] Whitelist ~/.cache/fontconfig/ by default #176

Closed
opened 2026-05-05 05:15:13 -06:00 by gitea-mirror · 4 comments
Owner

Originally created by @Lymia on GitHub (Jan 21, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/248

I noticed that some programs like Firefox take forever to launch under firejail, and eat up 100% of a core while launching, while test cases like "firejail bash" didn't.

I investigated a bit, and it seems that white-listing ~/.cache/fontconfig/ makes Firefox launch a lot faster. Without it, I believe Firefox's rebuilding the font cache on every startup.

Originally created by @Lymia on GitHub (Jan 21, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/248 I noticed that some programs like Firefox take forever to launch under firejail, and eat up 100% of a core while launching, while test cases like "firejail bash" didn't. I investigated a bit, and it seems that white-listing ~/.cache/fontconfig/ makes Firefox launch a lot faster. Without it, I believe Firefox's rebuilding the font cache on every startup.
Author
Owner

@Saren-Arterius commented on GitHub (Jan 21, 2016):

also ~/.config/fontconfig/

<!-- gh-comment-id:173512684 --> @Saren-Arterius commented on GitHub (Jan 21, 2016): also ~/.config/fontconfig/
Author
Owner

@netblue30 commented on GitHub (Jan 21, 2016):

It is already fixed in git for the next release. Thanks.

<!-- gh-comment-id:173573963 --> @netblue30 commented on GitHub (Jan 21, 2016): It is already fixed in git for the next release. Thanks.
Author
Owner

@Lymia commented on GitHub (Jan 21, 2016):

Is it? I don't see ~/.cache/fontconfig anywhere in the tree, only ~/.config/fontconfig. It's a different directory.

$ grep -r "fontconfig"
etc/conkeror.profile:whitelist ~/.fontconfig
etc/whitelist-common.inc:whitelist ~/.fontconfig
etc/whitelist-common.inc:whitelist ~/.config/fontconfig

<!-- gh-comment-id:173684047 --> @Lymia commented on GitHub (Jan 21, 2016): Is it? I don't see ~/.cache/fontconfig anywhere in the tree, only ~/.config/fontconfig. It's a different directory. $ grep -r "fontconfig" etc/conkeror.profile:whitelist ~/.fontconfig etc/whitelist-common.inc:whitelist ~/.fontconfig etc/whitelist-common.inc:whitelist ~/.config/fontconfig
Author
Owner

@netblue30 commented on GitHub (Jan 23, 2016):

OOPS! I put it in now, thanks!

<!-- gh-comment-id:174195549 --> @netblue30 commented on GitHub (Jan 23, 2016): OOPS! I put it in now, thanks!
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#176
No description provided.