mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #5460] librewolf: program is not sandboxed (unexpected .desktop filename) #3003
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#3003
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Dyras on GitHub (Nov 7, 2022).
Original GitHub issue: https://github.com/netblue30/firejail/issues/5460
Description
Describe the bug
For some reason, running sudo firecfg on Linux Mint doesn't make LibreWolf run Firejailed. I believe this has to do with the path used for the default LibreWolf shortcut.
There's a thread on Reddit about this
https://www.reddit.com/r/LibreWolf/comments/yjgcpu/librewolf_isnt_automatically_firejailed_after/
Steps to Reproduce
Steps to reproduce the behavior
Expected behavior
LibreWolf's default shortcuts in the system should launch LibreWolf in Firejail, as anticipated
Actual behavior
LibreWolf's default shortcuts on Linux Mint aren't launching LibreWolf in Firejail.
Behavior without a profile
What changed calling
LC_ALL=C firejail --noprofile /path/to/programin a terminal?Didn't try it, but this is seemingly related to shortcuts
Additional context
Quoted from Reddit:
I think I've figured it out. The default shortcut for LibreWolf is:
/usr/share/librewolf/librewolf %uThe default shortcut for Firefox is:
firefox %uIf I change the shortcut for LibreWolf to the below, it works:
librewolf %uBasically, it seems like Firejail doesn't take the changed shortcut into account.
Additionally, running
firejail /usr/share/librewolf/librewolf %ubreaks the program, while runningfirejail librewolfworks flawlesslyEnvironment
Linux Mint 21
firejail version 0.9.70
Checklist
/usr/bin/vlc) "fixes" it).https://github.com/netblue30/firejail/issues/1139)browser-allow-drm yes/browser-disable-u2f noinfirejail.configto allow DRM/U2F in browsers.--profile=PROFILENAMEto set the right profile. (Only relevant for AppImages)Log
The long debug log:
https://pastebin.com/EFNvk8ha
Output of
LC_ALL=C firejail /path/to/program@Dyras commented on GitHub (Nov 22, 2022):
I just tested on Debian and the exact same thing is happening. Firefox runs in Firejail automagically, LibreWolf just doesn't.
@marek22k commented on GitHub (Mar 20, 2023):
Is there a current workaround to firecfg librewolf?
@kmk3 commented on GitHub (Apr 5, 2023):
Can this still be reproduced in firejail 0.9.72?
What is the output of the following commands on your system?
What are the versions of firefox/librewolf used? Where are they installed
from (normal distro repository/AppImage/etc)?
On Artix:
One guess: firecfg checks whether the program in the
Exec=line is in thepath, so maybe /usr/bin/firefox exists but not /usr/bin/librewolf.
Does creating the following file and re-running
firecfgsucceed as aworkaround?
~/bin/librewolf:
Run:
@Dyras commented on GitHub (Apr 7, 2023):
It's still happening on 0.9.72
I installed it from the Main Debian Repository:
https://librewolf.net/installation/debian/
Debian uses Firefox ESR:
The output of the following:
Is that the file can't be found.
However, the output of the following is as follows:
As for the usr/bin folder, there is actually a "librewolf" in there.
Running it as follows:
Works as intended.
I changed the name of start-librewolf.desktop to librewolf.desktop and reran sudo firecfg. It works!
So I assume the issue is that the file in applications is named start-librewolf.desktop rather than librewolf.desktop.
@rusty-snake commented on GitHub (Apr 7, 2023):
Duplicate of #2624
@rusty-snake commented on GitHub (Apr 7, 2023):
Same cause as in #2624 (this is issue number 5460 so we're 2836 issues later). The desktop file is not named after the profile file (or the other way around).
And same workaround as in #2624, create a
start-librewolf.profile. Or create your own firecfg(.py) 😎 .@marek22k commented on GitHub (Apr 11, 2023):
So I could use
ln -s /etc/firejail/librewolf.profile /etc/firejail/start-librewolf.profileas a workaround? Wouldn't it make sense to rename the profile in general or does the problem only occur with the Debian installation?@rusty-snake commented on GitHub (Apr 11, 2023):
Then you would have a working firecfg but a broken firejail unless you rename the actual binary too.
@kmk3 commented on GitHub (Apr 11, 2023):
(Offtopic)
@Dyras
Please see the following links for how to format code blocks in markdown:
@kmk3 commented on GitHub (Apr 11, 2023):
@Dyras on Apr 7:
Created a MR upstream to attempt to fix this:
@kmk3 commented on GitHub (Apr 15, 2023):
Good news: It was merged!
Let us know if anything changes when the next LibreWolf version is released
(the one after v112.0).
Closing this for now.