[GH-ISSUE #5117] mdns resolution with avahi #2884

New issue

Open

opened 2026-05-05 09:32:39 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 09:32:39 -06:00

Owner

Originally created by @reinerh on GitHub (Apr 23, 2022).
Original GitHub issue: https://github.com/netblue30/firejail/issues/5117

Forwarded from #1008137:

I find that I cannot access a web server running in my local lan with its
mDNS domain name with firefox-esr running inside firejail while I can with
firefox-esr running without firejail. This problem also applies to falkon,
chromium, when running inside firejail, but epiphany (gnome web) is not
affected.

I manage to run bash in firejail with profiles of these affected browsers,
and find that /run/avahi-daemon/ does not present in their jailed file
system, so it seems that some rules blacklist, or fail to whitelist this
path in these profiles or included rulesets.

Currently I walk around this issue by adding "whitelist
/run/avahi-daemon/" to my ~/.config/firejail/whitelist-run-common.local,
but I doubt whether it is appropriate to fix this issue by adding a
similar rule to /etc/firejail/whitelist-run-common.inc

Originally created by @reinerh on GitHub (Apr 23, 2022). Original GitHub issue: https://github.com/netblue30/firejail/issues/5117 Forwarded from [#1008137](https://bugs.debian.org/1008137): > I find that I cannot access a web server running in my local lan with its > mDNS domain name with firefox-esr running inside firejail while I can with > firefox-esr running without firejail. This problem also applies to falkon, > chromium, when running inside firejail, but epiphany (gnome web) is not > affected. > > I manage to run bash in firejail with profiles of these affected browsers, > and find that /run/avahi-daemon/ does not present in their jailed file > system, so it seems that some rules blacklist, or fail to whitelist this > path in these profiles or included rulesets. > > Currently I walk around this issue by adding "whitelist > /run/avahi-daemon/" to my ~/.config/firejail/whitelist-run-common.local, > but I doubt whether it is appropriate to fix this issue by adding a > similar rule to /etc/firejail/whitelist-run-common.inc

gitea-mirror added the

bug

networking

labels 2026-05-05 09:32:39 -06:00

gitea-mirror commented

2026-05-05 09:32:42 -06:00

Author

Owner

@ghost commented on GitHub (Apr 24, 2022):

Currently I walk around this issue by adding "whitelist
/run/avahi-daemon/" to my ~/.config/firejail/whitelist-run-common.local,
but I doubt whether it is appropriate to fix this issue by adding a
similar rule to /etc/firejail/whitelist-run-common.inc

In case we decide to add it to wrc it would be wise to double-check if we also need to add avahi to private-etc in relevant profiles. Alternatively we could add it to chromium & co, falkon and firefox & co only. Not sure what the best location would be to add it though, I don't use mDNS personally.

@ghost commented on GitHub (Apr 24, 2022): > Currently I walk around this issue by adding "whitelist /run/avahi-daemon/" to my ~/.config/firejail/whitelist-run-common.local, but I doubt whether it is appropriate to fix this issue by adding a similar rule to /etc/firejail/whitelist-run-common.inc In case we decide to add it to wrc it would be wise to double-check if we also need to add `avahi` to `private-etc` in relevant profiles. Alternatively we could add it to chromium & co, falkon and firefox & co only. Not sure what the best location would be to add it though, I don't use mDNS personally.

gitea-mirror commented

2026-05-05 09:32:43 -06:00

Author

Owner

@rusty-snake commented on GitHub (Jun 8, 2022):

Related: #5088

@rusty-snake commented on GitHub (Jun 8, 2022): Related: #5088

gitea-mirror referenced this issue

2026-05-05 10:22:33 -06:00

[PR #2884] [MERGED] Update itch profile #4568

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2884

No description provided.

Rows
Columns