github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

SFTP connections #2344

New issue

Closed

opened 2026-05-05 09:01:53 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 09:01:53 -06:00

Owner

Originally created by @MiltosKoutsokeras on GitHub (Nov 3, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3722

The Filezilla profile does not allow to open HOME/.ssh folder for using keys in OpenSSH/SFTP connections.

Bug and expected behavior

The Filezilla profile in /etc/firejail/filezilla.profile does not allow the access to the OpenSSH client folder HOME/.ssh.
What did you expect to happen? Since OpenSSH saves by default the client configuration and keys to HOME/.ssh I was expecting the profile of the program to have this path in the noblacklist section.

No profile and disabling firejail

What changed calling firejail --noprofile /path/to/program in a terminal? Works as expected as the directory is not forbidden.
What changed calling the program by path (check which <program> or firejail --list while the sandbox is running)?
Running the program without any path wields:

<Process ID>:<User name>::/usr/bin/firejail /usr/bin/filezilla

which filezilla wields /usr/local/bin/filezilla as expected.

Reproduce
Steps to reproduce the behavior:

Run in bash firejail filezilla
You cannot set keys from HOME/.ssh and also cannot create any new site as a popup is always thrown due to the access problem of your current sites.

Environment

Arch Linux
Firejail version 0.9.64

Additional context
The problem can be worked around either by disabling the Filezilla profile or putiing noblacklist ${HOME}/.ssh to the profile.

Checklist

The upstream profile (and redirect profile if exists) have no changes fixing it.
The program has a profile. (If not, request one in https://github.com/netblue30/firejail/issues/1139)
Programs needed for interaction are listed in the profile.
A short search for duplicates was performed.
If it is a AppImage, --profile=PROFILENAME is used to set the right profile.

debug output

Not available

Originally created by @MiltosKoutsokeras on GitHub (Nov 3, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3722 The Filezilla profile does not allow to open HOME/.ssh folder for using keys in OpenSSH/SFTP connections. **Bug and expected behavior** - The Filezilla profile in `/etc/firejail/filezilla.profile` does not allow the access to the OpenSSH client folder **HOME/.ssh**. - What did you expect to happen? Since OpenSSH saves by default the client configuration and keys to **HOME/.ssh** I was expecting the profile of the program to have this path in the `noblacklist` section. **No profile and disabling firejail** - What changed calling `firejail --noprofile /path/to/program` in a terminal? Works as expected as the directory is not forbidden. - What changed calling the program by path (check `which <program>` or `firejail --list` while the sandbox is running)? Running the program without any path wields: ``` <Process ID>:<User name>::/usr/bin/firejail /usr/bin/filezilla ``` `which filezilla` wields `/usr/local/bin/filezilla` as expected. **Reproduce** Steps to reproduce the behavior: 1. Run in bash `firejail filezilla` 2. You cannot set keys from `HOME/.ssh` and also cannot create any new site as a popup is always thrown due to the access problem of your current sites. **Environment** - Arch Linux - Firejail version 0.9.64 **Additional context** The problem can be worked around either by disabling the Filezilla profile or putiing `noblacklist ${HOME}/.ssh` to the profile. **Checklist** - [x] The upstream profile (and redirect profile if exists) have no changes fixing it. - [x] The program has a profile. (If not, request one in `https://github.com/netblue30/firejail/issues/1139`) - [ ] Programs needed for interaction are listed in the profile. - [x] A short search for duplicates was performed. - [ ] If it is a AppImage, `--profile=PROFILENAME` is used to set the right profile. <details><summary> debug output </summary> ``` Not available ``` </details>

gitea-mirror closed this issue

2026-05-05 09:01:54 -06:00

gitea-mirror commented

2026-05-05 09:01:56 -06:00

Author

Owner

@ghost commented on GitHub (Nov 3, 2020):

@MiltosKoutsokeras Thanks for reporting this!

@ghost commented on GitHub (Nov 3, 2020): @MiltosKoutsokeras Thanks for reporting this!

gitea-mirror commented

2026-05-05 09:01:57 -06:00

Author

Owner

@MiltosKoutsokeras commented on GitHub (Nov 28, 2020):

Glad I helped. I suppose the Filezilla profile is already updated in upstream.

@MiltosKoutsokeras commented on GitHub (Nov 28, 2020): Glad I helped. I suppose the Filezilla profile is already updated in upstream.

gitea-mirror referenced this issue

2026-05-05 10:16:56 -06:00

[PR #2344] [MERGED] Update gajim.profile #4269

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2344

No description provided.

Rows
Columns