mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #136] Need To Allow Process Fork Whitelisting #88
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#88
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @ilikenwf on GitHub (Nov 15, 2015).
Original GitHub issue: https://github.com/netblue30/firejail/issues/136
I am unable to launch default applications (eg Transgui for transmission) with the current stable release on Archlinux, which makes downloading Linux isos somwhat more troublesome as it requires saving the torrent (or whatever other file) to ~/Downloads and then opening it externally.
At one point, I managed to launch transgui but due to the nature of the sandboxing, the configuration wasn't there since we don't have that directory whitelisted. Is this seccomp.
@netblue30 commented on GitHub (Nov 16, 2015):
Transmission doesn't whitelist any file or directory, all directories should be available under /home/user. What exactly is your setup?
@ilikenwf commented on GitHub (Nov 16, 2015):
Firefox running in firejail, while attempting to add a torrent or magnet
link via Firefox's associations, to transmission GUI, which can either be
open or closed.
Both ways no longer work, I'd have to look at my backups and see what
version of Firejail I was running previously, but that version did work
with my filetype associations for opening things.
On Mon, Nov 16, 2015 at 7:18 AM, netblue30 notifications@github.com wrote:
@netblue30 commented on GitHub (Nov 17, 2015):
I use transmission-gtk myself. I have firefox working in a sandbox, and transmission-gtk open in another sandbox. I grab with the mouse the magnet link and release it in the transmission window and it works.
If you click on a torrent or a magnet, firefox associations will instruct the browser to start transmission in the same sandbox. Your sandbox whitelisting should take in account the fact that you intend to run both firefox and transmission. I will investigate further.
@ilikenwf commented on GitHub (Nov 17, 2015):
Ah, nice. I would use gtk if it would stop crashing (unrelated).
I didn't consider dragging - I'll have to try that.
On Tue, Nov 17, 2015 at 7:55 AM, netblue30 notifications@github.com wrote:
@netblue30 commented on GitHub (Nov 17, 2015):
Try transmission-qt, it's the same thing, just another graphic toolkit.
@ilikenwf commented on GitHub (Nov 17, 2015):
Yeah, its what I use, and despite being an xfce user it is more stable.
On Nov 17, 2015 1:24 PM, "netblue30" notifications@github.com wrote: