mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #6650] firecfg: microsoft-edge is not being sandboxed after running 'sudo firecfg' #3325
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#3325
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @nva1 on GitHub (Feb 18, 2025).
Original GitHub issue: https://github.com/netblue30/firejail/issues/6650
Description
I have Firejail installed on Linux Mint. I have all applications sandboxed with 'sudo firecfg'. I have Microsoft Edge installed. I installed the .deb package from Microsoft's website. After installing it, I ran 'sudo firecfg' and rebooted. When I have Edge running and I run 'firejail --list', I do not see micosoft-edge listed. I also notice that I can access all Home directory contents in Edge.
Steps to Reproduce
Environment
OS: Linux Mint 22.1 x86_64
Host: 21M70039US ThinkPad E14 Gen 6
Kernel: 6.11.0-17-generic
Checklist
@rusty-snake commented on GitHub (Feb 18, 2025):
Is edge in your autostart? How does the .desktop fils for edge look like?
@kmk3 commented on GitHub (Feb 18, 2025):
This should not be necessary.
How?
What is the version of firejail?
What is the full path to microsoft edge?
What is the output of the following:
@rusty-snake commented on GitHub (Feb 18, 2025):
* relogin may be necessary if cinnamon caches stuff without invalidating the caches
And
echo $PATH@nva1 commented on GitHub (Feb 19, 2025):
I don't really know what the autostart is. It's not something I've ever had to make any changes to. I have not made any changes to the .desktop file. None of the exec lines include 'firejail', but they also do not for any other browsers like Firefox, Brave, or Chromium which are all sandboxed when running them by clicking the desktop icon, selecting them in Linux Mint Menu, or through the terminal (without the 'firejail' command).
@nva1 commented on GitHub (Feb 19, 2025):
I usually select the Super key for the Linux Mint menu and start typing 'edge' and the Enter. Alternatively I'll click the desktop icon. Using these methods, Edge is not firejailed. I actually just noticed that it is when entering 'microsoft-edge' in the terminal.
firejail version 0.9.72
I'm not entirely sure which path is being invoked.
I removed the non-browser applications from this:
$ ls -al ~/.local/share/applications
$ cat ~/.local/share/applications/microsoft-edge.desktop
@rusty-snake commented on GitHub (Feb 19, 2025):
Fixed by
2cb40fbecd@rusty-snake commented on GitHub (Feb 19, 2025):
Duplicate of #5696
@nva1 commented on GitHub (Feb 19, 2025):
@kmk3 commented on GitHub (Feb 20, 2025):
Does it work with firejail-git?
@kmk3 commented on GitHub (Feb 22, 2025):
Closing as it seems to be very likely a duplicate of #5696.
Feel free to comment if you can reproduce it with firejail-git.