[GH-ISSUE #1386] xdg-open not working for opening links from firejailed pidgin in firejailed chromium #947

New issue

Closed

opened 2026-05-05 07:12:19 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 07:12:19 -06:00

Owner

Originally created by @Harvie on GitHub (Jul 16, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1386

Default pidgin setting is to open URLs using xdg-open, but it's apparently blocked by firejail 0.9.48. So i can't click-open any links from firejailed pidgin. I understand that xdg-open may be possible security problem as it allows to launch lot of different stuff depending on system configuration, but can't firejail be somehow inherited on xdg-open process so it will only allow xdg-open to launch browsers when launched from pidgin firejail?

I know that i can probably setup method other than xdg-open in pidgin settings, but this one is default, so its' support is needed to make everything work out of box.

Originally created by @Harvie on GitHub (Jul 16, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1386 Default pidgin setting is to open URLs using xdg-open, but it's apparently blocked by firejail 0.9.48. So i can't click-open any links from firejailed pidgin. I understand that xdg-open may be possible security problem as it allows to launch lot of different stuff depending on system configuration, but can't firejail be somehow inherited on xdg-open process so it will only allow xdg-open to launch browsers when launched from pidgin firejail? I know that i can probably setup method other than xdg-open in pidgin settings, but this one is default, so its' support is needed to make everything work out of box.

gitea-mirror

2026-05-05 07:12:19 -06:00

closed this issue
added the
enhancement
label

gitea-mirror commented

2026-05-05 07:12:22 -06:00

Author

Owner

@netblue30 commented on GitHub (Jul 17, 2017):

Yes, at this moment it will probably kill xdg-open.

@netblue30 commented on GitHub (Jul 17, 2017): Yes, at this moment it will probably kill xdg-open.

gitea-mirror commented

2026-05-05 07:12:23 -06:00

Author

Owner

@Fred-Barclay commented on GitHub (Oct 3, 2017):

@Harvie try copying the pidgin profile (/etc/firejail/pidgin.profile, probably) to ~/.config/firejail/, and then replace the private-bin pidgin line with private-bin pidgin,xdgopen,bash,sh,grep,egrep,<browser-name>, where is firefox, or google-chrome-stable, or whatever browser you want to use.

If that works and you're not using Arch, you can possibly remove bash and sh from the private-bin filter.

@Fred-Barclay commented on GitHub (Oct 3, 2017): @Harvie try copying the pidgin profile (/etc/firejail/pidgin.profile, probably) to ~/.config/firejail/, and then replace the `private-bin pidgin` line with `private-bin pidgin,xdgopen,bash,sh,grep,egrep,<browser-name>`, where <browser-name> is firefox, or google-chrome-stable, or whatever browser you want to use. If that works and you're not using Arch, you can possibly remove bash and sh from the private-bin filter.

gitea-mirror referenced this issue

2026-05-05 07:24:54 -06:00

[GH-ISSUE #1599] sandbox escapes with kdeinit #1067

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#947

No description provided.

Rows
Columns