github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #868] Wine profile (included in default Firejail installation) may be too restrictive #590

New issue

Closed

opened 2026-05-05 06:14:13 -06:00 by gitea-mirror · 3 comments

gitea-mirror commented

2026-05-05 06:14:13 -06:00

Owner

Originally created by @denizakcal on GitHub (Oct 20, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/868

When I try to run the 32-bit Windows version of Firefox ESR 45.4 via Wine (because I want to use Adobe's flash player to watch TV shows) using Firejail, the application/the 32-bit Windows version of Firefox hangs.

I remember errors along the lines of "error writing association file" in sixteen ≈"/home/user/.local/share/applications/wine-something.desktop" type files. I also recall the application working well without Firejail.

I'm not sure whether this means that the Wine profile included in the default Firejail installation should be amended, or if it's just something I should change in my particular system's Wine profile (but, for what it's worth, I remember reading online about someone else having such a use case, so it's probably not uncommon, especially now that Flash on Linux is not getting enough attention for such use cases).

Let me know what you think.

Originally created by @denizakcal on GitHub (Oct 20, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/868 When I try to run the 32-bit Windows version of Firefox ESR 45.4 via Wine (because I want to use Adobe's flash player to watch TV shows) using Firejail, the application/the 32-bit Windows version of Firefox hangs. I remember errors along the lines of "error writing association file" in sixteen ≈"/home/user/.local/share/applications/wine-something.desktop" type files. I also recall the application working well without Firejail. I'm not sure whether this means that the Wine profile included in the default Firejail installation should be amended, or if it's just something I should change in my particular system's Wine profile (but, for what it's worth, I remember reading online about someone else having such a use case, so it's probably not uncommon, especially now that Flash on Linux is not getting enough attention for such use cases). Let me know what you think.

gitea-mirror

2026-05-05 06:14:13 -06:00

closed this issue
added the
information_old
label

gitea-mirror commented

2026-05-05 06:14:20 -06:00

Author

Owner

@netblue30 commented on GitHub (Oct 20, 2016):

Let's mark it as a bug. Probably one of the lines in /etc/firejail/wine.profile is creating the problem. Can you open that file and start commenting (add a #) the lines one by one andtry it, maybe we can find it, thanks.

@netblue30 commented on GitHub (Oct 20, 2016): Let's mark it as a bug. Probably one of the lines in /etc/firejail/wine.profile is creating the problem. Can you open that file and start commenting (add a #) the lines one by one andtry it, maybe we can find it, thanks.

gitea-mirror commented

2026-05-05 06:14:21 -06:00

Author

Owner

@denizakcal commented on GitHub (Oct 20, 2016):

Alright, so it seems that, when seccomp is not commented, (the Windows version of) Firefox hangs (but, for what it's worth, sometimes it seems to take several seconds to hang, as opposed to hanging instantaneously).

@denizakcal commented on GitHub (Oct 20, 2016): Alright, so it seems that, when seccomp is not commented, (the Windows version of) Firefox hangs (but, for what it's worth, sometimes it seems to take several seconds to hang, as opposed to hanging instantaneously).

gitea-mirror commented

2026-05-05 06:14:24 -06:00

Author

Owner

@netblue30 commented on GitHub (Oct 22, 2016):

The easiest way to handle it is to use your wine profile with seccomp disabled. You will still be covered by nonewprivs and noroot - the bad guy will not be able to become root in the sandbox. But use this only for TV viewing, for regular browsing do "firejail firefox", especially for internet banking and anything else confidential.

@netblue30 commented on GitHub (Oct 22, 2016): The easiest way to handle it is to use your wine profile with seccomp disabled. You will still be covered by nonewprivs and noroot - the bad guy will not be able to become root in the sandbox. But use this only for TV viewing, for regular browsing do "firejail firefox", especially for internet banking and anything else confidential.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#590

No description provided.

Rows
Columns