[GH-ISSUE #7140] firejail intercepts arguments #3499

Open
opened 2026-05-05 10:02:08 -06:00 by gitea-mirror · 1 comment
Owner

Originally created by @kmk3 on GitHub (Apr 17, 2026).
Original GitHub issue: https://github.com/netblue30/firejail/issues/7140

Discussed in https://github.com/netblue30/firejail/discussions/7137

Originally posted by gcb April 15, 2026
Sorry if this is something obvious, but seems very strange and i still haven't had time to investigate, so asking for a sanity check.

Here's qpdf used without firejail:

$ /bin/qpdf --version
qpdf version 12.3.2
Run qpdf --copyright to see copyright and license information.

And here's firejail stealing the show:

$ qpdf --version
firejail version 0.9.80

Compile time support:
        - always force nonewprivs support is disabled
        - AppArmor support is enabled
        - AppImage support is enabled
        - chroot support is enabled
        - D-BUS proxy support is enabled
        - file transfer support is enabled
        - Landlock support is enabled
        - networking support is enabled
...

I don't have anything special for qpdf in firejail, it's all "upstream". archlinux package 0.9.80-1 (well, the version is up there too :)

What is going on?

Only for this qpdf command, firejail gets in the way and mess up invocation to the point I cannot use it. Everything else works fine.


Relates to:

Originally created by @kmk3 on GitHub (Apr 17, 2026). Original GitHub issue: https://github.com/netblue30/firejail/issues/7140 ### Discussed in https://github.com/netblue30/firejail/discussions/7137 <div type='discussions-op-text'> <sup>Originally posted by **gcb** April 15, 2026</sup> Sorry if this is something obvious, but seems very strange and i still haven't had time to investigate, so asking for a sanity check. Here's qpdf used without firejail: ```console $ /bin/qpdf --version qpdf version 12.3.2 Run qpdf --copyright to see copyright and license information. ``` And here's firejail stealing the show: ```console $ qpdf --version firejail version 0.9.80 Compile time support: - always force nonewprivs support is disabled - AppArmor support is enabled - AppImage support is enabled - chroot support is enabled - D-BUS proxy support is enabled - file transfer support is enabled - Landlock support is enabled - networking support is enabled ... ``` I don't have anything special for qpdf in firejail, it's all "upstream". archlinux package 0.9.80-1 (well, the version is up there too :) What is going on? Only for this qpdf command, firejail gets in the way and mess up invocation to the point I cannot use it. Everything else works fine. </div> --- Relates to: * #6969 * #6972
gitea-mirror added the
bug
label 2026-05-05 10:02:08 -06:00
Author
Owner

@kmk3 commented on GitHub (Apr 17, 2026):

@rusty-snake on Apr 15:

Regression from #6972

<!-- gh-comment-id:4270342750 --> @kmk3 commented on GitHub (Apr 17, 2026): @rusty-snake [on Apr 15](https://github.com/netblue30/firejail/discussions/7137#discussioncomment-16573721): > Regression from #6972
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3499
No description provided.