github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #1095] Firefox extension accessing non-whitelisted folder #750

New issue

Closed

opened 2026-05-05 06:34:02 -06:00 by gitea-mirror · 7 comments

gitea-mirror commented

2026-05-05 06:34:02 -06:00

Owner

Originally created by @mustaqimM on GitHub (Feb 9, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1095

I manually added my KeePass folder in KeeFox, ie. ~/.KeePass, and it's able to access it even though Firefox is using the default firejail profile. Is this normal for extensions to be granted unrestricted access?

Originally created by @mustaqimM on GitHub (Feb 9, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1095 I manually added my KeePass folder in KeeFox, ie. ~/.KeePass, and it's able to access it even though Firefox is using the default firejail profile. Is this normal for extensions to be granted unrestricted access?

gitea-mirror

2026-05-05 06:34:02 -06:00

closed this issue
added the
information_old
label

gitea-mirror commented

2026-05-05 06:34:07 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (Feb 9, 2017):

The default profile whitelists ~/.keepassx (at least in the version I have). Or did you actually mean ~/.KeePass? I will try installing the addon to see what happens.

@chiraag-nataraj commented on GitHub (Feb 9, 2017): The default profile whitelists ~/.keepassx (at least in the version I have). Or did you actually mean ~/.KeePass? I will try installing the addon to see what happens.

gitea-mirror commented

2026-05-05 06:34:08 -06:00

Author

Owner

@mustaqimM commented on GitHub (Feb 10, 2017):

@chiraag-nataraj I downloaded the portable version and moved the contents to my own folder: ~/.KeePass. I didn't whitelist it

@mustaqimM commented on GitHub (Feb 10, 2017): @chiraag-nataraj I downloaded the portable version and moved the contents to my own folder: `~/.KeePass`. I didn't whitelist it

gitea-mirror commented

2026-05-05 06:34:09 -06:00

Author

Owner

@netblue30 commented on GitHub (Feb 11, 2017):

This could be a possible problem: https://firejail.wordpress.com/support/frequently-asked-questions/#firefox

The first firefox instance takes over any subsequent instances. You need to make sure you are not already running firefox when you start the sandbox.

@netblue30 commented on GitHub (Feb 11, 2017): This could be a possible problem: https://firejail.wordpress.com/support/frequently-asked-questions/#firefox The first firefox instance takes over any subsequent instances. You need to make sure you are not already running firefox when you start the sandbox.

gitea-mirror commented

2026-05-05 06:34:10 -06:00

Author

Owner

@mustaqimM commented on GitHub (Feb 12, 2017):

@netblue30 I only launch a single instance with firejail, firejail is indeed running since I am able to only access the ~/Downloads folder among others http://i.imgur.com/5CHbRmD.png. I can't choose the ~/.KeePass folder from the open dialog in the KeeFox extension but if I manually add it: http://i.imgur.com/6bB1eeg.png, then I am able to use it with KeeFox

@mustaqimM commented on GitHub (Feb 12, 2017): @netblue30 I only launch a single instance with firejail, firejail is indeed running since I am able to only access the `~/Downloads` folder among others http://i.imgur.com/5CHbRmD.png. I can't choose the `~/.KeePass` folder from the open dialog in the KeeFox extension but if I manually add it: http://i.imgur.com/6bB1eeg.png, then I am able to use it with KeeFox

gitea-mirror commented

2026-05-05 06:34:12 -06:00

Author

Owner

@netblue30 commented on GitHub (Feb 12, 2017):

What distro are you using? Also, give me some links to Firefox addon and keepass portable you have installed, I'll give it a try.

@netblue30 commented on GitHub (Feb 12, 2017): What distro are you using? Also, give me some links to Firefox addon and keepass portable you have installed, I'll give it a try.

gitea-mirror commented

2026-05-05 06:34:15 -06:00

Author

Owner

@mustaqimM commented on GitHub (Feb 13, 2017):

@netblue30 I'm currently on Antergos (arch linux). The addon is here (1.4.1) and the portable KeePass is here (2.35)

@mustaqimM commented on GitHub (Feb 13, 2017): @netblue30 I'm currently on Antergos (arch linux). The addon is [here (1.4.1)](https://addons.mozilla.org/firefox/downloads/latest/keefox/platform:2/addon-306880-latest.xpi?src=search) and the portable KeePass is [here (2.35)](https://sourceforge.net/projects/keepass/files/KeePass%202.x/2.35/KeePass-2.35.zip/download?nowrap)

gitea-mirror commented

2026-05-05 06:34:17 -06:00

Author

Owner

@SYN-cook commented on GitHub (Mar 1, 2017):

@mustaqimM The reason is that Keepass and KeeFox communicate with each other as local server and local client. Or in other words: KeeFox uses Keepass to access the password store, it doesn't access the password store directly. There is no sandbox escape here.

@SYN-cook commented on GitHub (Mar 1, 2017): @mustaqimM The reason is that Keepass and KeeFox communicate with each other as local server and local client. Or in other words: KeeFox uses Keepass to access the password store, it doesn't access the password store directly. There is no sandbox escape here.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#750

No description provided.

Rows
Columns