[GH-ISSUE #285] Firefox and Thunderbird profiles not loaded in latest Firejail version in Ubuntu #200

Closed
opened 2026-05-05 05:18:10 -06:00 by gitea-mirror · 3 comments
Owner

Originally created by @brunonova on GitHub (Feb 8, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/285

I'm using Ubuntu 14.04 and I just upgraded Firejail to 0.9.38.

When starting Firefox and Thunderbird with Firejail, it loaded the generic profile instead of the correct profile.

After running firejail with the --debug option, I noticed that the "command name" was firefox.sh instead of firefox (same thing for Thunderbird).
In Ubuntu, /usr/bin/firefox is a symlink to /usr/lib/firefox/firefox.sh, so the new version of Firejail is following symlinks when determining the name of the program, and thus ends up trying to load the wrong profile.

A workaround is to create the firefox.sh.profile and thunderbird.sh.profile profiles as symlinks to the originals. Other programs and other distros may also be affected.

Originally created by @brunonova on GitHub (Feb 8, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/285 I'm using Ubuntu 14.04 and I just upgraded Firejail to 0.9.38. When starting Firefox and Thunderbird with Firejail, it loaded the generic profile instead of the correct profile. After running `firejail` with the `--debug` option, I noticed that the "command name" was `firefox.sh` instead of `firefox` (same thing for Thunderbird). In Ubuntu, `/usr/bin/firefox` is a symlink to `/usr/lib/firefox/firefox.sh`, so the new version of Firejail is following symlinks when determining the name of the program, and thus ends up trying to load the wrong profile. A workaround is to create the `firefox.sh.profile` and `thunderbird.sh.profile` profiles as symlinks to the originals. Other programs and other distros may also be affected.
Author
Owner

@netblue30 commented on GitHub (Feb 9, 2016):

Fixed! Workaround if you don't want to update to the version in git: start the sandbox as "firefail firefox", without specifying a full path:

$ firejail --debug firefox
Command name #firefox#
Found firefox profile in /etc/firejail directory
Reading profile /etc/firejail/firefox.profile
Reading profile /etc/firejail/disable-mgmt.inc
Reading profile /etc/firejail/disable-secret.inc
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/whitelist-common.inc
Using the local network stack
Parent pid 5798, child pid 5799
Initializing child process

[...]

Starting "firefox" 
execvp argument 0: /bin/bash
execvp argument 1: -c
execvp argument 2: "firefox" 
Child process initialized
<!-- gh-comment-id:181914411 --> @netblue30 commented on GitHub (Feb 9, 2016): Fixed! Workaround if you don't want to update to the version in git: start the sandbox as "firefail firefox", without specifying a full path: ``` $ firejail --debug firefox Command name #firefox# Found firefox profile in /etc/firejail directory Reading profile /etc/firejail/firefox.profile Reading profile /etc/firejail/disable-mgmt.inc Reading profile /etc/firejail/disable-secret.inc Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/whitelist-common.inc Using the local network stack Parent pid 5798, child pid 5799 Initializing child process [...] Starting "firefox" execvp argument 0: /bin/bash execvp argument 1: -c execvp argument 2: "firefox" Child process initialized ```
Author
Owner

@brunonova commented on GitHub (Feb 11, 2016):

Great!
Tested and it works!

<!-- gh-comment-id:182897819 --> @brunonova commented on GitHub (Feb 11, 2016): Great! Tested and it works!
Author
Owner

@netblue30 commented on GitHub (Feb 11, 2016):

You're welcome!

<!-- gh-comment-id:182902378 --> @netblue30 commented on GitHub (Feb 11, 2016): You're welcome!
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#200
No description provided.