mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #4936] broken bash autocomplete with --private option #2829
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#2829
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @kuesji on GitHub (Feb 13, 2022).
Original GitHub issue: https://github.com/netblue30/firejail/issues/4936
Description
tab inserts tab instead of autocompleting current command in bash when you run firejail with --private parameter
Steps to Reproduce
firejail --privateExpected behavior
completion of current command
Actual behavior
inserts tab
Behavior without a profile
nothing. behavior is same with default.profile and --noprofile
Additional context
tab works as intented if --private parameter not supplied to firejail
Environment
Checklist
/usr/bin/vlc) "fixes" it).https://github.com/netblue30/firejail/issues/1139)browser-allow-drm yes/browser-disable-u2f noinfirejail.configto allow DRM/U2F in browsers.--profile=PROFILENAMEto set the right profile. (Only relevant for AppImages)Log
Output of
LC_ALL=C firejail /path/to/programOutput of
LC_ALL=C firejail --debug /path/to/program@kmk3 commented on GitHub (Feb 13, 2022):
@kuesji commented on Feb 13:
I can confirm this on Artix. Tested with
git br->git branch. Worksoutside of firejail but fails with
firejail --private /bin/bash.@kuesji commented on GitHub (Feb 13, 2022):
hi @netblue30 . i checked source code now and saw your commit (
disable shell tab completion for --whitelist and --private commands).solved] can i bypass this behaviour without recompiling from source while still using--private?@rusty-snake commented on GitHub (Feb 13, 2022):
If you
--blacklist=${HOME}/.inputrcbash can not read it.@kuesji commented on GitHub (Feb 13, 2022):
thanks, it worked and i added this to default profile for future use.
@netblue30 commented on GitHub (Feb 14, 2022):
Yes, I disabled it by default on --private/whitelisted sandboxes. I'll add a --enable-tab-completion command line option/profile command for people who still want it.
@netblue30 commented on GitHub (Feb 20, 2022):
Ended up doing --tab instead. Fix here:
e6c50240f9@rusty-snake commented on GitHub (Feb 20, 2022):
--tab todos:
@RalfJung commented on GitHub (Apr 17, 2022):
I just spent >15min debugging my setup to figure out why tab completion is broken. Never in my life would I have expected this to be a feature...
I guess now I will have to wait until 0.9.70 reaches my distribution before shells inside this jail become useful again. Or, more likely, I will switch that jail from whitelisting to blacklisting, thus reducing its security but restoring its usability.
@rusty-snake commented on GitHub (Apr 17, 2022):
There is a workaround: https://github.com/netblue30/firejail/issues/4936#issuecomment-1037892597
@RalfJung commented on GitHub (Apr 17, 2022):
Ah that's a cheeky one. :D Thanks!
@nnmfnwl7 commented on GitHub (May 9, 2022):
I completely have no clue what is going on in this bug, but doing any --whitelist=${home}/neededstuff is also causing tab insert instead of doing autocomplete.
Also I have no clue why blacklist some non existent file could make autocomplete feature to be working again.
Thank you for this workaround. Looking forward to be fixed by default.
@rusty-snake commented on GitHub (May 9, 2022):
Because that's the config where auto-complete is disabled.
@kolAflash commented on GitHub (Jan 31, 2025):
@netblue30
I like to understand why tab completion is disabled by default. Is tab completion a security risk?
Maybe add the reason behind this to the man page.