mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #6461] vscodium: missing profile redirect for codium #3284
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#3284
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @MiltiadisKoutsokeras on GitHub (Sep 3, 2024).
Original GitHub issue: https://github.com/netblue30/firejail/issues/6461
Is your feature request related to a problem? Please describe.
Firejail does not contain a profile to support the latest VSCodium in the apt package of Debian 11.
Describe the solution you'd like
I would like the Firejail installation to contain a profile that supports the latest VSCodium, as it does with past versions in files:
Describe alternatives you've considered
It would be possible to create a local custom file for latest VSCodium version but the program details have changed from the previous versions (whitelisted direcotries, privileges, etc.).
@kmk3 commented on GitHub (Sep 3, 2024):
Basic debugging information is missing; please follow the bug report template:
@MiltiadisKoutsokeras commented on GitHub (Sep 4, 2024):
I would happily do that, but it is not a BUG. It is a feature request to provide a profile for the latest version of a program.
@rusty-snake commented on GitHub (Sep 4, 2024):
Moved
@MiltiadisKoutsokeras commented on GitHub (Sep 4, 2024):
Thanks, you can close this.
@kmk3 commented on GitHub (Sep 4, 2024):
Profiles are generally not separated by program versions (with limited
exceptions for new major versions of certain programs), they are created based
on the name of the executable.
Is there a new executable name for vscodium?
If not, there already exists a profile for vscodium and it either works
properly or it doesn't.
If it doesn't work, it's a bug.
Which directories and privileges?
In what version of vscodium did they change?
@MiltiadisKoutsokeras commented on GitHub (Sep 4, 2024):
The executable is renamed to
codiumso none of the provided profiles match (even if they did, the contents would not apply).Well then it is a BUG.
If I had a complete list for those, I would happily create and share the profile. You have to communicate with the developers for that.
Unfortunately I do not know this, I realized that firejail did not apply a profile recently while researching another issue.
@rusty-snake commented on GitHub (Sep 4, 2024):
https://github.com/netblue30/firejail/blob/master/etc/profile-a-l/codium.profile added 3 years ago. Also in
897f12dd88/src/firecfg/firecfg.config (L174)So yes basic debugging information like your firejail version are missing.
@MiltiadisKoutsokeras commented on GitHub (Sep 4, 2024):
Here are my versions:
firejail --version): 0.9.64.4It seems that the package is old enough and includes outdated profiles. I will try to copy the upstream ones. The only profile installed is
/etc/firejail/vscodium.profilewith contents:This is probably something the Debian maintainer should do, so please close the report.
@kmk3 commented on GitHub (Sep 4, 2024):
@MiltiadisKoutsokeras on Sep 4:
Note that we do not maintain that version of firejail:
Versions other than the latest usually have outdated profiles and may contain
bugs and security vulnerabilities that were fixed in later versions.
I think it's unlikely to be upgraded on a stable Debian release.
See also the recommended way to install firejail on Debian:
@kmk3 commented on GitHub (Sep 4, 2024):
Duplicate of #3871
@rusty-snake commented on GitHub (Sep 4, 2024):
Does not necessarily work, the profile may use commands unknown by your firejail version or include other profiles you don't have or with wrong content.