mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #1401] How to use input methods with graphical isolation? #957
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#957
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @chiraag-nataraj on GitHub (Jul 25, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1401
So this is kind of an odd problem in that it both makes sense and I cannot figure out a workaround that wouldn't violate the isolation itself.
I started using
xprato isolate my programs graphically. Pretty much everything is working except for my input method (fcitx). Try as I might, I just cannot getfcitxto work with programs that are running under an xpra server (it still works fine in an unjailed terminal emulator, for example). When I try to runfcitx-diagnoseto figure out what the problem might be, it seems like I get the same messages. It fails to detect a running instance whether I enable xpra or not (which makes sense due to PID namespaces). It has access to the exact same sockets in both cases (it makes use of/tmp/fcitx-socket-:0). The only thing I'm changing is that I enable xpra.Of course this makes sense when you consider the point of
xpraitself (at least the way it's used here). But obviously it has a mechanism for selectively sharing things such as the clipboard. I already setinput-method = keepin~/.xpra/xpra.conf, soxprashouldn't be messing with the environment variables in this case.Does anyone have any ideas for how to selectively share access to fcitx (as with all other resources xpra lets you access)?
@chiraag-nataraj commented on GitHub (Jul 25, 2017):
So I found that you can partially solve this by launching
fcitx -rwith the proper display. However, that only worked for my terminal emulator - firefox still refuses to use it. I don't know if that's a firefox problem or an xpra problem or some combination or whatever. Closing this for now.