github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #589] xpra and private-dev #414

New issue

Closed

opened 2026-05-05 05:49:04 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 05:49:04 -06:00

Owner

Originally created by @weeshy on GitHub (Jun 20, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/589

I've tried to run
xpra --socket-dir=${HOME}/.firexpra start :39 --daemon=no --start=xterm inside a firejail with private-dev and private-etc passwd

It stopped with following error:

(==) Using system config directory "/usr/share/X11/xorg.conf.d"
(EE)
Fatal server error:
(EE) parse_vt_settings: Cannot open /dev/tty0 (No such file or directory)
(EE)

Could I somehow add /dev/tty0 to list of available /dev files or make xpra skip parse_vt_settings phase?

I've tried built-in x11=xpra feature, but it gives me some errors, so I decided to try start xpra manually

Originally created by @weeshy on GitHub (Jun 20, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/589 I've tried to run `xpra --socket-dir=${HOME}/.firexpra start :39 --daemon=no --start=xterm` inside a firejail with `private-dev` and `private-etc passwd` It stopped with following error: > (==) Using system config directory "/usr/share/X11/xorg.conf.d" > (EE) > Fatal server error: > (EE) parse_vt_settings: Cannot open /dev/tty0 (No such file or directory) > (EE) Could I somehow add `/dev/tty0` to list of available `/dev` files or make xpra skip `parse_vt_settings phase`? I've tried built-in `x11=xpra` feature, but it gives me some errors, so I decided to try start xpra manually

gitea-mirror

2026-05-05 05:49:04 -06:00

closed this issue
added the
information_old
label

gitea-mirror commented

2026-05-05 05:49:10 -06:00

Author

Owner

@weeshy commented on GitHub (Jun 21, 2016):

The problems is that xpra really need /etc/xpra/xpra.conf, which is not duplicated as hardcoded default settings.

@weeshy commented on GitHub (Jun 21, 2016): The problems is that xpra really need /etc/xpra/xpra.conf, which is not duplicated as hardcoded default settings.

gitea-mirror commented

2026-05-05 05:49:12 -06:00

Author

Owner

@netblue30 commented on GitHub (Jun 21, 2016):

You can whitelist /dev if you need to:

$ firejail --whitelist=/dev/tty0 --whitelist=/dev/null
Reading profile /etc/firejail/default.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/disable-passwdmgr.inc

** Note: you can use --noprofile to disable default.profile **

Parent pid 11680, child pid 11681

Child process initialized
$ ls -l /dev
total 0
crw-rw-rw- 1 65534 65534 1, 3 Jun 17 11:39 null
crw--w---- 1 65534 tty   4, 0 Jun 17 11:39 tty0
$

@netblue30 commented on GitHub (Jun 21, 2016): You can whitelist /dev if you need to: ``` $ firejail --whitelist=/dev/tty0 --whitelist=/dev/null Reading profile /etc/firejail/default.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/disable-passwdmgr.inc ** Note: you can use --noprofile to disable default.profile ** Parent pid 11680, child pid 11681 Child process initialized $ ls -l /dev total 0 crw-rw-rw- 1 65534 65534 1, 3 Jun 17 11:39 null crw--w---- 1 65534 tty 4, 0 Jun 17 11:39 tty0 $ ```

gitea-mirror referenced this issue

2026-05-05 10:04:41 -06:00

[PR #415] [MERGED] profile.c: add --net <iface> #3613

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#414

No description provided.

Rows
Columns