[GH-ISSUE #3417] seccomp.block-secondary #2148

New issue

Closed

opened 2026-05-05 08:49:19 -06:00 by gitea-mirror · 4 comments

gitea-mirror commented

2026-05-05 08:49:19 -06:00

Owner

Originally created by @rusty-snake on GitHub (May 15, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3417

Are there any reasons why we don't use seccomp.block-secondary? It should work for almost all profiles (except wine and steam).

Originally created by @rusty-snake on GitHub (May 15, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3417 Are there any reasons why we don't use `seccomp.block-secondary`? It should work for almost all profiles (except wine and steam).

gitea-mirror closed this issue

2026-05-05 08:49:20 -06:00

gitea-mirror commented

2026-05-05 08:49:22 -06:00

Author

Owner

@ghost commented on GitHub (May 15, 2020):

I have been running with seccomp.block-secondary in globals.local for as long as it exists without issues. But I don't use wine nor steam. The only other exception I encountered is when firejailing an appimage (which generally I try to avoid). We would need to determine how appimages in general react to the seccomp.block-secondary option, which I for one am not particularly looking forward to.

@ghost commented on GitHub (May 15, 2020): I have been running with `seccomp.block-secondary` in globals.local for as long as it exists without issues. But I don't use wine nor steam. The only other exception I encountered is when firejailing an [appimage](https://github.com/loki-project/session-desktop/releases/download/v1.0.8/session-messenger-desktop-linux-x86_64-1.0.8.AppImage) (which generally I try to avoid). We would need to determine how appimages in general react to the seccomp.block-secondary option, which I for one am not particularly looking forward to.

gitea-mirror commented

2026-05-05 08:49:23 -06:00

Author

Owner

@rusty-snake commented on GitHub (May 15, 2020):

I have been running with seccomp.block-secondary in globals.local

I too

The only other exception I encountered is when firejailing an appimage

Just this one? or also other appimages?

@rusty-snake commented on GitHub (May 15, 2020): > I have been running with seccomp.block-secondary in globals.local I too > The only other exception I encountered is when firejailing an appimage Just this one? or also other appimages?

gitea-mirror commented

2026-05-05 08:49:24 -06:00

Author

Owner

@ghost commented on GitHub (May 15, 2020):

Just this one? or also other appimages?

This is the only appimage I use because I couldn't create a reasonable profile for its non-appimage counterpart. It's not something I'm happy with, in general I avoid using snap/flatpak/appimage technology. So I cannot determine if it is something specific to this application or something in general with appimages. I'll try to test a few others, but to be conclusive we might ask @ AppImageKit I suppose.

@ghost commented on GitHub (May 15, 2020): > Just this one? or also other appimages? This is the only appimage I use because I couldn't create a reasonable profile for its non-appimage counterpart. It's not something I'm happy with, in general I avoid using snap/flatpak/appimage technology. So I cannot determine if it is something specific to this application or something in general with appimages. I'll try to test a few others, but to be conclusive we might ask @ [AppImageKit](https://github.com/AppImage/AppImageKit) I suppose.

gitea-mirror commented

2026-05-05 08:49:25 -06:00

Author

Owner

@rusty-snake commented on GitHub (Sep 1, 2020):

Tested KeePassXC and Cool-Retro-Term AI, both worked with sbs. We can go and add sbs to the most profiles.

@rusty-snake commented on GitHub (Sep 1, 2020): Tested KeePassXC and Cool-Retro-Term AI, both worked with sbs. We can go and add sbs to the most profiles.

gitea-mirror referenced this issue

2026-05-05 10:15:52 -06:00

[PR #2186] [MERGED] Fix issue #2148: Make sure firejail can find helper programs in sandbox regardless of options. #4212

gitea-mirror referenced this issue

2026-05-05 10:15:53 -06:00

[PR #2190] [CLOSED] Revert "Fix issue #2148: Make sure firejail can find helper programs in sandbox regardless of options." #4215