mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #5143] psi-plus: cannot receive PGP-encrypted messages (writable-run-user) #2894
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#2894
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @vbooka1 on GitHub (May 15, 2022).
Original GitHub issue: https://github.com/netblue30/firejail/issues/5143
Description
PGP encryption does not work with the current psi-plus profile, probably because it could not connect either to
/usr/bin/gpgand/or/usr/bin/gpg-agentAdding this line:
private-bin psi-plus,gpg,gpg-agent,pinentry-qt,pinentry-qt5topsi-plus.localdoes not help.Steps to Reproduce
ps auxw | grep gpgto ensure that you have/usr/bin/gpg-agentrunningfirejail psi-plusExpected behavior
Running Psi+ without firejail results in almost instant login without hangs, and the messenger could both encrypt outgoing and decrypt incoming messages.
Actual behavior
logging in hangs (Psi+ window freezes) for 20-30 seconds while psi-plus writes several "Could not create AF_NETLINK socket" messages in its log, every 10 seconds, shortly after followed by
Destroyed while process ("/usr/bin/gpg") is still running:after logging in I could only send encrypted messages but not receive them. My recipients tell that Psi+ automatically replies them with an error "Unable to decrypt".
Behavior without a profile
calling
LC_ALL=C firejail --noprofile psi-plusstill makes login hang, but removes the "Could not create AF_NETLINK socket" log lines. The "QProcess: Destroyed while process ("/usr/bin/gpg") is still running." line is still there.Sending encrypted messages does work, receiving them still does not.
Additional context
my additional
psi-plus.localconfig:I have checked
psi.profileand found this comment:so I have tried to add the following line to
psi-plus.local:But it did not help. Logging in still hangs, there is still
[20220515 18:58:51] W:QProcess: Destroyed while process ("/usr/bin/gpg") is still running. (unknown:0, unknown)log line, and after logging in I still could not receive GPG messages.Environment
Checklist
/usr/bin/vlc) "fixes" it).https://github.com/netblue30/firejail/issues/1139)browser-allow-drm yes/browser-disable-u2f noinfirejail.configto allow DRM/U2F in browsers.--profile=PROFILENAMEto set the right profile. (Only relevant for AppImages)Log
Output of
LC_ALL=C firejail --debug /path/to/program@smitsohu commented on GitHub (May 16, 2022):
Can you add
writable-run-userand try again?@vbooka1 commented on GitHub (May 18, 2022):
yep, adding
writable-run-usertopsi-plus.localsolved the problem - now Psi+ logs in almost immediately and I could send and receive PGP encrypted messages.Thank you!