[GH-ISSUE #3316] dropbox breaks the jail #2083

New issue

Closed

opened 2026-05-05 08:45:28 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 08:45:28 -06:00

Owner

Originally created by @ghost on GitHub (Apr 4, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3316

It seems that dropbox breaks out of firejail:

zako@fray:~ $ ps aux | grep dropbox
zako       15731  0.0  0.0   4196  2440 ?        S    18:27   0:00 /usr/bin/firejail /usr/bin/dropbox
zako       15736  0.0  0.0   4208  1884 ?        S    18:27   0:00 /usr/bin/firejail /usr/bin/dropbox
zako       15745  3.6  2.8 3104504 228736 ?      Sl   18:27   0:12 /usr/bin/dropbox
zako       16219  0.0  0.0   6296  2308 pts/0    S+   18:33   0:00 grep --color=auto dropbox
zako@fray:~ $ sudo aa-unconfined | grep dropbox
15745 /opt/dropbox/dropbox (/usr/bin/dropbox) not confined

I start dropbox with the ".desktop" application:

zako@fray:~ $ cat /usr/share/applications/dropbox.desktop 
[Desktop Entry]
Version=1.0
Type=Application
Name=Dropbox
Comment=A free service that lets you bring your photos, docs, and videos anywhere and share them easily.
Exec=dropbox
Icon=dropbox
Terminal=false
StartupNotify=false
Categories=Network;
zako@fray:~ $ which dropbox
/usr/local/bin/dropbox
zako@fray:~ $ ls -lh /usr/local/bin/dropbox 
lrwxrwxrwx 1 root root 17 abr  4 16:52 /usr/local/bin/dropbox -> /usr/bin/firejail

I am running firejail 0.9.62-1 in Arch Linux.

Originally created by @ghost on GitHub (Apr 4, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3316 It seems that dropbox breaks out of firejail: ```bash zako@fray:~ $ ps aux | grep dropbox zako 15731 0.0 0.0 4196 2440 ? S 18:27 0:00 /usr/bin/firejail /usr/bin/dropbox zako 15736 0.0 0.0 4208 1884 ? S 18:27 0:00 /usr/bin/firejail /usr/bin/dropbox zako 15745 3.6 2.8 3104504 228736 ? Sl 18:27 0:12 /usr/bin/dropbox zako 16219 0.0 0.0 6296 2308 pts/0 S+ 18:33 0:00 grep --color=auto dropbox zako@fray:~ $ sudo aa-unconfined | grep dropbox 15745 /opt/dropbox/dropbox (/usr/bin/dropbox) not confined ``` I start dropbox with the ".desktop" application: ```bash zako@fray:~ $ cat /usr/share/applications/dropbox.desktop [Desktop Entry] Version=1.0 Type=Application Name=Dropbox Comment=A free service that lets you bring your photos, docs, and videos anywhere and share them easily. Exec=dropbox Icon=dropbox Terminal=false StartupNotify=false Categories=Network; zako@fray:~ $ which dropbox /usr/local/bin/dropbox zako@fray:~ $ ls -lh /usr/local/bin/dropbox lrwxrwxrwx 1 root root 17 abr 4 16:52 /usr/local/bin/dropbox -> /usr/bin/firejail ``` I am running firejail 0.9.62-1 in Arch Linux.

gitea-mirror

2026-05-05 08:45:28 -06:00

closed this issue
added the
information_old
label

gitea-mirror commented

2026-05-05 08:45:31 -06:00

Author

Owner

@rusty-snake commented on GitHub (Apr 4, 2020):

Firejail needs to start dropbox, so a /usr/bin/dropbox process is not bad. Check if
firejail --tree | grep dropbox shows you the same PID.

@rusty-snake commented on GitHub (Apr 4, 2020): Firejail needs to start dropbox, so a /usr/bin/dropbox process is not bad. Check if `firejail --tree | grep dropbox` shows you the same PID.

gitea-mirror commented

2026-05-05 08:45:32 -06:00

Author

Owner

@ghost commented on GitHub (Apr 4, 2020):

Sorry, I am new to firejail. It seems to be working ok:

dropbox process is inside a firejail tree
apparmor shows as "unconfined" because the dropbox profile doesn't use apparmor.

I close the ticket and sorry again.

@ghost commented on GitHub (Apr 4, 2020): Sorry, I am new to firejail. It seems to be working ok: - dropbox process is inside a firejail tree - apparmor shows as "unconfined" because the dropbox profile doesn't use apparmor. I close the ticket and sorry again.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2083

No description provided.

Rows
Columns