[GH-ISSUE #3170] firefox: Yubikey is not detected if plugged in after launching (private-dev) #1985

Closed
opened 2026-05-05 08:39:02 -06:00 by gitea-mirror · 5 comments
Owner

Originally created by @ibahnasy on GitHub (Jan 20, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3170

If a yubikey is inserted after launching Firefox with firejail, it won't be detected as U2F device at all.
It has to be plugged in BEFORE launching the browser.
Also if the key is removed and re-inserted while the browser is running, it won't function too.

Originally created by @ibahnasy on GitHub (Jan 20, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3170 If a yubikey is inserted after launching Firefox with firejail, it won't be detected as U2F device at all. It has to be plugged in BEFORE launching the browser. Also if the key is removed and re-inserted while the browser is running, it won't function too.
gitea-mirror 2026-05-05 08:39:02 -06:00
  • closed this issue
  • added the
    duplicate
    label
Author
Owner

@rusty-snake commented on GitHub (Jan 20, 2020):

Duplicate of #3092

<!-- gh-comment-id:576265426 --> @rusty-snake commented on GitHub (Jan 20, 2020): Duplicate of #3092
Author
Owner

@rusty-snake commented on GitHub (Jan 20, 2020):

Remove nou2f and private-dev from your firefox.profile.

echo "ignore private-dev" >> ~/.config/firejail/firefox.local
sudo sh -c "echo 'browser-disable-u2f no' >> /etc/firejail/firejail.config
<!-- gh-comment-id:576266164 --> @rusty-snake commented on GitHub (Jan 20, 2020): Remove `nou2f` and `private-dev` from your firefox.profile. ``` echo "ignore private-dev" >> ~/.config/firejail/firefox.local sudo sh -c "echo 'browser-disable-u2f no' >> /etc/firejail/firejail.config ```
Author
Owner

@SkewedZeppelin commented on GitHub (Jan 21, 2020):

I do not like 32c3669, exposes too much.
Either we should add another conditional or a comment.

<!-- gh-comment-id:576899056 --> @SkewedZeppelin commented on GitHub (Jan 21, 2020): I do not like 32c3669, exposes too much. Either we should add another conditional or a comment.
Author
Owner

@rusty-snake commented on GitHub (Jan 22, 2020):

I do not like 32c3669, exposes too much.

@SkewedZeppelin the default is no u2f in browser => private-dev is set unless a user adds browser-disable-u2f no.

# Disable U2F in browsers, default enabled.
# browser-disable-u2f yes
<!-- gh-comment-id:577177782 --> @rusty-snake commented on GitHub (Jan 22, 2020): > I do not like 32c3669, exposes too much. @SkewedZeppelin the default is no u2f in browser => `private-dev` is set unless a user adds `browser-disable-u2f no`. ``` # Disable U2F in browsers, default enabled. # browser-disable-u2f yes ```
Author
Owner

@odkr commented on GitHub (Nov 10, 2025):

I encountered that issue w/ firefail 0.9.76 on Void Linux. The solution was to add ignore noinput to firefox-common.local.

<!-- gh-comment-id:3513553311 --> @odkr commented on GitHub (Nov 10, 2025): I encountered that issue w/ firefail 0.9.76 on Void Linux. The solution was to add `ignore noinput` to firefox-common.local.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1985
No description provided.