mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #4118] Discord Game Activity #2542
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#2542
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @sillitatti on GitHub (Mar 19, 2021).
Original GitHub issue: https://github.com/netblue30/firejail/issues/4118
How might Discord's Game Activity detection be made to work with firejail? Even if I run Discord with "firejail --noprofile Discord", this what I get:
I'm running Firejail 0.9.64 on Fedora 33. Discord build number 80041.
@rusty-snake commented on GitHub (Mar 19, 2021):
Try if the noprofile.profile helps. If not there is no hope.
is vulnerable to CVE-2021-26910.
@sillitatti commented on GitHub (Mar 19, 2021):
Thanks, I tried it. Same result 😞
@reinerh commented on GitHub (Mar 21, 2021):
Some time ago I worked on an AppArmor profile for Discord and noticed in the audit log that it tries to access the process list, and even to ptrace some processes (browsers, steam, spotify, ...).
@rusty-snake mentioned in the noprofile that a new PID namespace is still being created. So Discord will not see other processes.
What you could try is to start the other processes with firejail as well and join their namespaces (
--join=$pid).@sillitatti commented on GitHub (Mar 21, 2021):
Thank you! It works with the examples
firejail --noprofile --name=steam steamandfirejail --join=steam Discord. Now I'll just need to create a good combined profile.