[GH-ISSUE #4866] tutanota: freezes after downloading attachment (AppImage)

gitea-mirror commented

2026-05-05 09:27:00 -06:00

Owner

Originally created by @CocoR55 on GitHub (Jan 18, 2022).
Original GitHub issue: https://github.com/netblue30/firejail/issues/4866

Description

Bug with the last version 3.89.25 of tutanota (tutanota-desktop-linux.AppImage) under firejail
However it is possible to
to read messages
to send messages with attached files
to receive messages with attached files
to download an attachment but once the file is downloaded, the tutanota application does not answer anymore... "please wait".
/run/firefail/appimage/tutanota-desktop --field-trial-handle=2.....2 --disable-features=SpareRebderFor.......
.. You have to kill it.

Steps to Reproduce

Steps to reproduce the behavior:

Menu/internet/Tutanota/Identification/password
Open a message with an attachment.
Download file.
See bug: "the tutanota application does not answer anymore"

Expected behavior

After file downloaded, tutanota can answer and continue to work.

Actual behavior

After file downloaded, tutanota cannot answer and does not continue to work.

Behavior without a profile

Tutanota + firejail + noprofile, no issue. However, tutanota+firejail+profile=/home/leloup/.config/firejail/tutanota-desktop.profile, the downloading issue is reproduced.

Additional context

If the file is downloaded without using the application, there is no bug.
It seems to me that the problem did not exist at the beginning of its use.
Tests with V3.89.20, instead of V3.89.25, give the same problem.
Tutanota installed on another PC with Linux Mint Xfce instead of Cinnamon, tutanota+firejail+profile=/home/leloup/.config/firejail/tutanota-desktop.profile. In this case, a window opens each time asking which application manages the files. I enter thunar. Downloading is made without issu

Environment

OS: Linux Mint Cinnamon 20.2
Firefox: 95.0.1
Firejail version 0.9.66AD`).

Checklist

The issues is caused by firejail (i.e. running the program by path (e.g. /usr/bin/vlc) "fixes" it).
I can reproduce the issue without custom modifications (e.g. globals.local).
The program has a profile. (If not, request one in https://github.com/netblue30/firejail/issues/1139)
The profile (and redirect profile if exists) hasn't already been fixed upstream.
I have performed a short search for similar issues (to avoid opening a duplicate).
I'm aware of browser-allow-drm yes/browser-disable-u2f no in firejail.config to allow DRM/U2F in browsers.
I used --profile=PROFILENAME to set the right profile. (Only relevant for AppImages)

Originally created by @CocoR55 on GitHub (Jan 18, 2022). Original GitHub issue: https://github.com/netblue30/firejail/issues/4866 ### Description **Bug with the last version 3.89.25 of tutanota (tutanota-desktop-linux.AppImage) under firejail** However it is possible to to read messages to send messages with attached files to receive messages with attached files to download an attachment but once the file is downloaded, the tutanota application does not answer anymore... "please wait". /run/firefail/appimage/tutanota-desktop --field-trial-handle=2.....2 --disable-features=SpareRebderFor....... .. You have to kill it. ### Steps to Reproduce Steps to reproduce the behavior: Menu/internet/Tutanota/Identification/password Open a message with an attachment. Download file. See bug: "the tutanota application does not answer anymore" ### Expected behavior After file downloaded, tutanota can answer and continue to work. ### Actual behavior After file downloaded, tutanota cannot answer and does not continue to work. ### Behavior without a profile Tutanota + firejail + noprofile, no issue. However, tutanota+firejail+profile=/home/leloup/.config/firejail/tutanota-desktop.profile, the downloading issue is reproduced. ### Additional context If the file is downloaded without using the application, there is no bug. It seems to me that the problem did not exist at the beginning of its use. Tests with V3.89.20, instead of V3.89.25, give the same problem. Tutanota installed on another PC with Linux Mint Xfce instead of Cinnamon, tutanota+firejail+profile=/home/leloup/.config/firejail/tutanota-desktop.profile. In this case, a window opens each time asking which application manages the files. I enter thunar. Downloading is made without issu ### Environment OS: Linux Mint Cinnamon 20.2 Firefox: 95.0.1 Firejail version 0.9.66AD`). ### Checklist - [x] The issues is caused by firejail (i.e. running the program by path (e.g. `/usr/bin/vlc`) "fixes" it). - [x] I can reproduce the issue without custom modifications (e.g. globals.local). - [x] The program has a profile. (If not, request one in `https://github.com/netblue30/firejail/issues/1139`) - [x] The profile (and redirect profile if exists) hasn't already been fixed [upstream](https://github.com/netblue30/firejail/tree/master/etc). - [x] I have performed a short search for similar issues (to avoid opening a duplicate). - [ ] I'm aware of `browser-allow-drm yes`/`browser-disable-u2f no` in `firejail.config` to allow DRM/U2F in browsers. - [ ] I used `--profile=PROFILENAME` to set the right profile. (Only relevant for AppImages)

gitea-mirror commented

2026-05-05 09:27:01 -06:00

Author

Owner

@ghost commented on GitHub (Jan 18, 2022):

I've never used tutanota but it might be an issue stemming from private-etc. Things you can try right now to see if they fix the issue:

add ignore private-etc to your local override
add private-etc mime.types,xdg to your local override

But these are longshots and without knowing what exactly is in your ~/.config/firejail/tutanota-desktop.profile this is stabbing in the dark. Can you post that file here please? Also post electron override if you have that, as the tutanota-desktop.profile includes that one.

@ghost commented on GitHub (Jan 18, 2022): I've never used tutanota but it _might_ be an issue stemming from `private-etc`. Things you can try right now to see if they fix the issue: - add `ignore private-etc` to your local override - add `private-etc mime.types,xdg` to your local override But these are longshots and without knowing what exactly is in your `~/.config/firejail/tutanota-desktop.profile` this is stabbing in the dark. Can you post that file here please? Also post electron override if you have that, as the tutanota-desktop.profile includes that one.

gitea-mirror commented

2026-05-05 09:27:02 -06:00

Author

Owner

@CocoR55 commented on GitHub (Jan 21, 2022):

Thank you for your message
To check a possible interaction, I have completely uninstalled Flatpak from my PC. I still have the problem.

@CocoR55 commented on GitHub (Jan 21, 2022): Thank you for your message To check a possible interaction, I have completely uninstalled Flatpak from my PC. I still have the problem.

gitea-mirror commented

2026-05-05 09:27:03 -06:00

Author

Owner

@CocoR55 commented on GitHub (Jan 21, 2022):

I'm not sure I understand. I typed either firejail ignore private-etc and the command is not found or firejail --ignore private-etc and Error: invalid --ignore command line optio

@CocoR55 commented on GitHub (Jan 21, 2022): I'm not sure I understand. I typed either firejail ignore private-etc and the command is not found or firejail --ignore private-etc and Error: invalid --ignore command line optio

gitea-mirror commented

2026-05-05 09:27:04 -06:00

Author

Owner

@CocoR55 commented on GitHub (Jan 21, 2022):

tutanota-desktop.profile is the same like https://github.com/netblue30/firejail/pull/3870/commits/70ef3de4b62ddb9577083d9656732a679a43a7c8

@CocoR55 commented on GitHub (Jan 21, 2022): tutanota-desktop.profile is the same like [ https://github.com/netblue30/firejail/pull/3870/commits/70ef3de4b62ddb9577083d9656732a679a43a7c8](url)

gitea-mirror commented

2026-05-05 09:27:05 -06:00

Author

Owner

@ghost commented on GitHub (Jan 22, 2022):

I'm not sure I understand. I typed either firejail ignore private-etc and the command is not found or firejail --ignore private-etc and Error: invalid --ignore command line optio

For CLI:
--ignore=private-etc
--private-etc=mime.types,xdg

For *.profile or *.local:
ignore private-etc
private-etc mime.types,xdg

If ~/.config/firejail/tutanota-desktop.local doesn't exist (and you don't have it in /etc/firejail either), you'll have to create it.

@ghost commented on GitHub (Jan 22, 2022): > I'm not sure I understand. I typed either firejail ignore private-etc and the command is not found or firejail --ignore private-etc and Error: invalid --ignore command line optio For CLI: `--ignore=private-etc` `--private-etc=mime.types,xdg` For *.profile or *.local: `ignore private-etc` `private-etc mime.types,xdg` If ~/.config/firejail/tutanota-desktop.local doesn't exist (and you don't have it in /etc/firejail either), you'll have to create it.

gitea-mirror commented

2026-05-05 09:27:06 -06:00

Author

Owner

@CocoR55 commented on GitHub (Jan 24, 2022):

Following your instruction, inside /etc/firejail:

$ cat tutanota-desktop.profile
?HAS_APPIMAGE: ignore private-dev
ignore private-etc
private-etc mime.types,xdg
private-etc alternatives,ca-certificates,crypto-policies,fonts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,machine-id,nsswitch.conf,pki,resolv.conf,ssl
private-opt tutanota-desktop

$ firejail --ignore=private-etc --private-etc=mime.types,xdg --appimage \
  --profile=/etc/firejail/tutanota-desktop.profile \
  /home/Leloup/Tutanota/tutanota-desktop-linux.AppImage

Result is: a window with:

The server could not be reached, you seem to be offline. Please try again later.

@CocoR55 commented on GitHub (Jan 24, 2022): Following your instruction, inside /etc/firejail: ```console $ cat tutanota-desktop.profile ?HAS_APPIMAGE: ignore private-dev ignore private-etc private-etc mime.types,xdg private-etc alternatives,ca-certificates,crypto-policies,fonts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,machine-id,nsswitch.conf,pki,resolv.conf,ssl private-opt tutanota-desktop ``` ```console $ firejail --ignore=private-etc --private-etc=mime.types,xdg --appimage \ --profile=/etc/firejail/tutanota-desktop.profile \ /home/Leloup/Tutanota/tutanota-desktop-linux.AppImage ``` Result is: a window with: ``` The server could not be reached, you seem to be offline. Please try again later. ```

gitea-mirror commented

2026-05-05 09:27:07 -06:00

Author

Owner

@CocoR55 commented on GitHub (Jan 24, 2022):

tutanota-desktop.profile.txt

@CocoR55 commented on GitHub (Jan 24, 2022): [tutanota-desktop.profile.txt](https://github.com/netblue30/firejail/files/7927106/tutanota-desktop.profile.txt)

gitea-mirror commented

2026-05-05 09:27:08 -06:00

Author

Owner

@CocoR55 commented on GitHub (Jan 24, 2022):

tutanota_desktop.log
tutanota_desktop_old.log

@CocoR55 commented on GitHub (Jan 24, 2022): [tutanota_desktop.log](https://github.com/netblue30/firejail/files/7927185/tutanota_desktop.log) [tutanota_desktop_old.log](https://github.com/netblue30/firejail/files/7927188/tutanota_desktop_old.log)

gitea-mirror commented

2026-05-05 09:27:08 -06:00

Author

Owner

@CocoR55 commented on GitHub (Jan 27, 2022):

Linux stack trace:
The package that provides /run/firejail/appimage/tutanota-desktop is not found.

@CocoR55 commented on GitHub (Jan 27, 2022): Linux stack trace: The package that provides /run/firejail/appimage/tutanota-desktop is not found.

gitea-mirror commented

2026-05-05 09:27:09 -06:00

Author

Owner

@CocoR55 commented on GitHub (Feb 2, 2022):

With the version v3.91.3, this is the same.

@CocoR55 commented on GitHub (Feb 2, 2022): With the version v3.91.3, this is the same.