mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #2953] Need help for plasma browser integration #1847
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#1847
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @CodeArtisan00 on GitHub (Sep 9, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2953
I have installed plasma integration extension for firefox(nightly) & it does work if firefox ain't firejailed. So is there a way to make it work inside firejail? Inside firejail it's showing "failed to connect to native host".
@rusty-snake commented on GitHub (Sep 9, 2019):
4ed69edbc4/etc/firefox-common.profile (L37-L39)Try adding
ignore nodbustofirefox.local.@CodeArtisan00 commented on GitHub (Sep 9, 2019):
It's still showing the same message. btw, I have private etc enabled in firefox-common.profile
can that be the reason?
@rusty-snake commented on GitHub (Sep 9, 2019):
Possible, but I think that rather one more path needs to be whitelisted.
@CodeArtisan00 commented on GitHub (Sep 9, 2019):
which one?
@rusty-snake commented on GitHub (Sep 9, 2019):
Thats the big question. 🙄
@CodeArtisan00 commented on GitHub (Sep 9, 2019):
I have disabled private-etc, but the problem persists.
@rusty-snake commented on GitHub (Sep 9, 2019):
Have you enabled private-bin?
@CodeArtisan00 commented on GitHub (Sep 9, 2019):
yea in firefox profile.
@CodeArtisan00 commented on GitHub (Sep 9, 2019):
done... just had to add plasma-browser-integration-host in private-bin
Thanks
@rusty-snake commented on GitHub (Sep 9, 2019):
63721fad1a/org.kde.plasma.firefox_integration.json.in (L4)Try adding
private-bin plasma-browser-integration-hostto firefox.local.@CodeArtisan00 commented on GitHub (Sep 9, 2019):
can I ask another question which is not related with this issue or should I open a new one?
@rusty-snake commented on GitHub (Sep 9, 2019):
If an other user has the same question it's easy to find it in a new issue.
@CodeArtisan00 commented on GitHub (Sep 9, 2019):
ok
@rusty-snake commented on GitHub (Sep 9, 2019):
@Neo00001
With it works, right?
@CodeArtisan00 commented on GitHub (Sep 9, 2019):
ignore nodbus & private-bin plasma-browser-integration-host
@rusty-snake commented on GitHub (Sep 9, 2019):
Wiki done: https://github.com/netblue30/firejail/wiki/Frequently-Asked-Questions#how-do-i-enable-plasma-browser-integration-in-firefox
@CodeArtisan00 commented on GitHub (Oct 25, 2020):
with
xdg-dbus-proxyhaving some problem. basic media control works but progress of downloads in notification are doesn't work properly.with
it shows pic1. so I added
dbus-user.talk org.kde.JobViewServer& now it shows pic2 along with pic1. Desired is only pic2.If I use only
ignore dbus-user nonewithout anydbus-user filterit works as intended. So most likely some other portals must have to be allowed. Any help or hint will be appreciated.btw,is there any way to trace dbus call or trace/log blocked dbus call? hope it makes sense
@rusty-snake commented on GitHub (Oct 26, 2020):
You can inspect D-Bus names with d-feet or qdbus-viewer or in /usr/share/dbus-1/services/*. To trace/monitor D-Bus calls in the sandbox you can use
firejail --log-dbusbut this works only fordbus-user filter. Or you can monitor you session-bus with tools such as dbus-monitor, bustle or busctl monitor, However monitoring the session-bus creates a lot of spam which is not form the sandbox. I plan to write a script which catches all the D-Bus traffic of a program using dbus-daemon and dbus-monitor, but I do not have that time ATM. If the program has a flatpak, you can also look at it's permissions.@CodeArtisan00 commented on GitHub (Oct 26, 2020):
ok... I will look into these later.
@CodeArtisan00 commented on GitHub (Oct 26, 2020):
ok. here what worked for me.
thanks for the help.
@rusty-snake commented on GitHub (Oct 27, 2020):
So your dbus-policy for firefox looks like this.
Works plasma browser integration w/o
org.freedesktop.Notifications? (I want to add a note to firefox.profile.)@CodeArtisan00 commented on GitHub (Oct 27, 2020):
plasma browser integration works without
org.freedesktop.Notifications& regarding proper functioning of plasma browser integration you don't needI'm using this
if instead of
dbus-user.own org.mpris.MediaPlayer2.plasma-browser-integrationI usethen I can pause & resume media from system tray but can't get the thumbnail & the progress bar.
Spec-
OS: Arch(KDE plasma)Kernel: 5.9.1Plasma ver: 5.20.2firejail ver:0.9.64