github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #3140] Problem with firefox nightly auto-update #1974

New issue

Closed

opened 2026-05-05 08:38:18 -06:00 by gitea-mirror · 7 comments

gitea-mirror commented

2026-05-05 08:38:18 -06:00

Owner

Originally created by @CodeArtisan00 on GitHub (Jan 12, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3140

On Manjaro(KDE) firefox-nightly & firefox-beta don't get auto update if running inside firejail. Can you suggest any work-around? Btw, without firejail, firefox can auto update.

On Manjaro auto update looks like

Originally created by @CodeArtisan00 on GitHub (Jan 12, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3140 On Manjaro(KDE) firefox-nightly & firefox-beta don't get auto update if running inside firejail. Can you suggest any work-around? Btw, without firejail, firefox can auto update. [On Manjaro auto update looks like](https://imgur.com/1RAD6wm)

gitea-mirror

2026-05-05 08:38:18 -06:00

closed this issue
added the
question_old
label

gitea-mirror commented

2026-05-05 08:38:21 -06:00

Author

Owner

@rusty-snake commented on GitHub (Jan 12, 2020):

https://i.imgur.com/1RAD6wm.jpg

How do you install firefox?

@rusty-snake commented on GitHub (Jan 12, 2020): https://i.imgur.com/1RAD6wm.jpg How do you install firefox?

gitea-mirror commented

2026-05-05 08:38:22 -06:00

Author

Owner

@CodeArtisan00 commented on GitHub (Jan 12, 2020):

Downloaded d tar file from firefox & extracted it to /opt & made a launcher that's it.

@CodeArtisan00 commented on GitHub (Jan 12, 2020): Downloaded d tar file from firefox & extracted it to /opt & made a launcher that's it.

gitea-mirror commented

2026-05-05 08:38:22 -06:00

Author

Owner

@CodeArtisan00 commented on GitHub (Jan 17, 2020):

Without apparmor, auto update works properly. So, when I have to update I use,

firejail --ignore=apprmor /path/firefox

@CodeArtisan00 commented on GitHub (Jan 17, 2020): Without apparmor, auto update works properly. So, when I have to update I use, `firejail --ignore=apprmor /path/firefox`

gitea-mirror commented

2026-05-05 08:38:23 -06:00

Author

Owner

@Vincent43 commented on GitHub (Jan 17, 2020):

In general profiles are developed with assumption that apps are installed through package managers like apt. If you download binaries yourself and put it in some arbitrary directory then some things may stop working. I think we can't really help other than propose above workaround.

@Vincent43 commented on GitHub (Jan 17, 2020): In general profiles are developed with assumption that apps are installed through package managers like apt. If you download binaries yourself and put it in some arbitrary directory then some things may stop working. I think we can't really help other than propose above workaround.

gitea-mirror commented

2026-05-05 08:38:23 -06:00

Author

Owner

@rusty-snake commented on GitHub (Jan 17, 2020):

@Vincent43 since your the AppArmor expert here, allows the apparmor profile writing in /opt?

@Neo00001 as @Vincent43 said, we can't do really more here.

@rusty-snake commented on GitHub (Jan 17, 2020): @Vincent43 since your the AppArmor expert here, allows the apparmor profile writing in /opt? @Neo00001 as @Vincent43 said, we can't do really more here.

gitea-mirror commented

2026-05-05 08:38:24 -06:00

Author

Owner

@Vincent43 commented on GitHub (Jan 17, 2020):

AppArmor blocks writing in /opt. Usually files in /opt are owned & writable only by root but I guess in this case firefox folder was copied with user ownership and permissions. AppArmor profile also blocks execution from writable directories so allowing writing to /opt would violate this rule.

@Vincent43 commented on GitHub (Jan 17, 2020): AppArmor blocks writing in `/opt`. Usually files in `/opt` are owned & writable only by root but I guess in this case firefox folder was copied with user ownership and permissions. AppArmor profile also blocks execution from writable directories so allowing writing to `/opt` would violate this rule.

gitea-mirror commented

2026-05-05 08:38:24 -06:00

Author

Owner

@CodeArtisan00 commented on GitHub (Jan 17, 2020):

@rusty-snake & @Vincent43 thanks for clarifying. & I was just looking for a work-around. blocking writing to /opt is preferable

@CodeArtisan00 commented on GitHub (Jan 17, 2020): @rusty-snake & @Vincent43 thanks for clarifying. & I was just looking for a work-around. blocking writing to /opt is preferable

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1974

No description provided.

Rows
Columns