mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #5679] claws-mail: bsfilter plugin does not work #3060
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#3060
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @marek22k on GitHub (Feb 23, 2023).
Original GitHub issue: https://github.com/netblue30/firejail/issues/5679
Description
When I try to open Claws Mail with the bsfilter plugin and Firejail, a message is displayed that bsfilter cannot be called.
Steps to Reproduce
Steps to reproduce the behavior
Expected behavior
bsfilter can be loaded.
Actual behavior
bsfilter cannot be loaded.
Behavior without a profile
bsfilter can be loaded.
Additional context
Workaround:
Add the file
claws-mail.localin/etc/firejailwith the following content:Environment
firejail --version).git rev-parse HEAD).Checklist
/usr/bin/vlc) "fixes" it).https://github.com/netblue30/firejail/issues/1139)browser-allow-drm yes/browser-disable-u2f noinfirejail.configto allow DRM/U2F in browsers.--profile=PROFILENAMEto set the right profile. (Only relevant for AppImages)@ghost commented on GitHub (Feb 23, 2023):
Thank you for reporting. Not sure if our default claws-mail profile should support all possible plugins out-of-the-box. That would kind of defeat using
disable-interpreters.inc. For overrides we have counterpartallow-foo.incfiles though (which is very similar to what you have in your workaround):27aaa07efe/etc/inc/allow-ruby.inc (L1-L7)So an
include allow-ruby.incin theory should be more future-proof.I'm not very familiar with Parrot OS. Can you upgrade firejail to the latest release?
@marek22k commented on GitHub (Feb 23, 2023):
Parrot OS is based on Debian. I have now pulled firejail out of the backports:
@marek22k commented on GitHub (Feb 23, 2023):
After upgrading firejail does not work anymore:
@ghost commented on GitHub (Feb 23, 2023):
Odd indeed. We don't have that file anymore, although I can't track right now when it got dropped in our git history. Can you locate any
include disable-passwdmgr.inclines in your /etc/firejail? I'm assuming it doesn't exist under ~/.config/firejail, as in that case firejail would have found it.@marek22k commented on GitHub (Feb 23, 2023):
grep of disable-passwdmgr.inc
@marek22k commented on GitHub (Feb 23, 2023):
Ahh, I forget to get the package
firejail-profilesfrom backports. Now the new version works for me.@marek22k commented on GitHub (Feb 23, 2023):
The problem still exists with the new version.
@ghost commented on GitHub (Feb 23, 2023):
Indeed it would. That's to be expected because of the
include disable-interpreters.incin the included email-common.profile. That blocksruby(amongst others), which the bsfilter plugin apparently needs to function properly.The point I'm trying to make is this: although we could easily add a line to allow ruby, I'm not quite sure that's the way to go (yet). Firejail's local override functionality can solve this, as you point out in your workaround. I'm looking at the claws-mail support details at the moment to check what set of interpreters the officially available plugins share so we can make an informed decision on what to allow by default (if anything).
@kmk3 commented on GitHub (Aug 23, 2024):
It looks like there were attempts to fix this:
@marek22k
Is this still an issue with firejail-git?
@marek22k commented on GitHub (Aug 23, 2024):
I overwrite my profile with https://codeberg.org/mark22k/firejail-patches/src/branch/main/profiles/claws-mail.local and that works. Since the same changes have been made in firejail, it should now work.
@marek22k commented on GitHub (Aug 23, 2024):
I also tested it. It seems to work. Only the following error is still in the default profile (when trying to sign a mail with GPG):
(see https://github.com/netblue30/firejail/issues/5477)