github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #3937] dolphin: cannot start keepassxc #2458

New issue

Closed

opened 2026-05-05 09:08:32 -06:00 by gitea-mirror · 8 comments

gitea-mirror commented

2026-05-05 09:08:32 -06:00

Owner

Originally created by @MrFrank17 on GitHub (Jan 31, 2021).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3937

Hi,

till now I was starting KeepassXC through the KDE start menu and everything worked as expected.
However, if I start it by opening an associated database file in the KDE file browser dolphin, the KeepassXC profile seems not be loaded (eg KeepassXC cannot access its own configuration files in .config). Also it is not listed in firejail --list.
Is this expected behavior when starting it within the scope of another application (dolphin in this case)?

Thanks
Frank

Related commits:

12d1de484 ("remove dophin from firecfg.config", 2021-05-26)

Originally created by @MrFrank17 on GitHub (Jan 31, 2021). Original GitHub issue: https://github.com/netblue30/firejail/issues/3937 Hi, till now I was starting KeepassXC through the KDE start menu and everything worked as expected. However, if I start it by opening an associated database file in the KDE file browser dolphin, the KeepassXC profile seems not be loaded (eg KeepassXC cannot access its own configuration files in .config). Also it is not listed in `firejail --list`. Is this expected behavior when starting it within the scope of another application (dolphin in this case)? Thanks Frank Related commits: * 12d1de484 ("remove dophin from firecfg.config", 2021-05-26)

gitea-mirror

2026-05-05 09:08:32 -06:00

closed this issue
added the
firecfg
label

gitea-mirror commented

2026-05-05 09:08:35 -06:00

Author

Owner

@rusty-snake commented on GitHub (Jan 31, 2021):

Is this expected behavior when starting it within the scope of another application (dolphin in this case)?

If this other application is firejailed too, yes.

@rusty-snake commented on GitHub (Jan 31, 2021): > Is this expected behavior when starting it within the scope of another application (dolphin in this case)? If this other application is firejailed too, yes.

gitea-mirror commented

2026-05-05 09:08:36 -06:00

Author

Owner

@MrFrank17 commented on GitHub (Jan 31, 2021):

Ok, then I guess I can close this issue ...
Thanks for the quick reply!

@MrFrank17 commented on GitHub (Jan 31, 2021): Ok, then I guess I can close this issue ... Thanks for the quick reply!

gitea-mirror commented

2026-05-05 09:08:37 -06:00

Author

Owner

@MrFrank17 commented on GitHub (Feb 2, 2021):

After closing this issue a question came to my mind, therefore I reopen it and hope @rusty-snake or someone still reads it.
To my understanding opening a program from another program still uses the profile of the first one, even if the second has its own.
How do you handle in this case file browsers with firejail? All opened files from the file browser (office, pdf, ...) would never use its designated profile. Is the solution to not firejail a file browser?

@MrFrank17 commented on GitHub (Feb 2, 2021): After closing this issue a question came to my mind, therefore I reopen it and hope @rusty-snake or someone still reads it. To my understanding opening a program from another program still uses the profile of the first one, even if the second has its own. How do you handle in this case file browsers with firejail? All opened files from the file browser (office, pdf, ...) would never use its designated profile. Is the solution to **not** firejail a file browser?

gitea-mirror commented

2026-05-05 09:08:39 -06:00

Author

Owner

@rusty-snake commented on GitHub (Feb 3, 2021):

Is the solution to not firejail a file browser?

Yes. Dolphin is the only file browser in firecfg.config (for any reasons). If you disable thumbnails or sandbox the thumbnailers and don't use it for remote file access e.g. smb, there is no much risk left.

@rusty-snake commented on GitHub (Feb 3, 2021): > Is the solution to not firejail a file browser? Yes. Dolphin is the only file browser in firecfg.config (for any reasons). If you disable thumbnails or sandbox the thumbnailers and don't use it for remote file access e.g. smb, there is no much risk left.

gitea-mirror commented

2026-05-05 09:08:40 -06:00

Author

Owner

@MrFrank17 commented on GitHub (Feb 3, 2021):

Edit: I found the firecfg.conf in /usr/lib/x86_64-linux-gnu/firejail and commenting out dolphin works as expected. krunner is already commented out, probably for the exactly same reason.

Do you (or someone else) know which program is doing the thumbnailing in dolphin? This would really be my preferred option to sandbox this process instead of turning of thumbnails all together.

Thanks

@MrFrank17 commented on GitHub (Feb 3, 2021): Edit: I found the `firecfg.conf` in `/usr/lib/x86_64-linux-gnu/firejail` and commenting out dolphin works as expected. `krunner` is already commented out, probably for the exactly same reason. Do you (or someone else) know which program is doing the thumbnailing in dolphin? This would really be my preferred option to sandbox this process instead of turning of thumbnails all together. Thanks

gitea-mirror commented

2026-05-05 09:08:40 -06:00

Author

Owner

@rusty-snake commented on GitHub (Feb 3, 2021):

Different thumbnail-programs are used depending on the file-format and installing new programs can add additional (krita, xournalpp and mypaint are example that I remember). So I suggest you to disable all thumbnailers expect for mp4,png,jpg,what else you need. IIRC has dolphin many settings for that.

@rusty-snake commented on GitHub (Feb 3, 2021): Different thumbnail-programs are used depending on the file-format and installing new programs can add additional (krita, xournalpp and mypaint are example that I remember). So I suggest you to disable all thumbnailers expect for mp4,png,jpg,what else you need. IIRC has dolphin many settings for that.

gitea-mirror commented

2026-05-05 09:08:41 -06:00

Author

Owner

@MrFrank17 commented on GitHub (Feb 5, 2021):

Yes, dolphin has many options to toggle thumb-nailing.
I guess this is more smooth than trying to sandbox the programs ...

@MrFrank17 commented on GitHub (Feb 5, 2021): Yes, dolphin has many options to toggle thumb-nailing. I guess this is more smooth than trying to sandbox the programs ...

gitea-mirror commented

2026-05-05 09:08:41 -06:00

Author

Owner

@rusty-snake commented on GitHub (Mar 8, 2021):

I'm closing here due to inactivity, please fell free to request to reopen if you have more questions.

@rusty-snake commented on GitHub (Mar 8, 2021): I'm closing here due to inactivity, please fell free to request to reopen if you have more questions.

gitea-mirror referenced this issue

2026-05-05 10:17:58 -06:00

[PR #2458] [MERGED] Harden file.profile #4326

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2458

No description provided.

Rows
Columns