[GH-ISSUE #1478] Question regarding symlinks and firejail #991

New issue

Closed

opened 2026-05-05 07:16:34 -06:00 by gitea-mirror · 1 comment

gitea-mirror commented

2026-05-05 07:16:34 -06:00

Owner

Originally created by @ghost on GitHub (Aug 18, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1478

I have most of my personal dotfiles in a single folder for backup ease. Related to this discussion is the result of the following two commands:

ln -s ~/.config/pers/wm ~/.config/fontconfig
ln -s ~/.config/pers/app/qute ~/.config/qutebrowser

the wm folder contains fonts.conf
the qute folder contains files that usually are in the qutebrowser profile directory
when not using firejail, when launched qutebrowser reads the font configuration right.
when using firejail and having .config/fontconfig/ an actual folder containing fonts.conf, qutebrowser reads the font configuration right

My issue appears when ~/.config/fontconfig is a symlink, even though it doesn't appear to be an issue with ~/.config/qutebrowser being one.

Here is the whole profile current profile I use:

noblacklist ~/.config/qutebrowser
whitelist ~/.config/qutebrowser
noblacklist ~/.config/pers/app/qute
whitelist ~/.config/pers/app/qute
noblacklist ~/.config/pers/wm
whitelist ~/.config/pers/wm
whitelist ~/dl

include /etc/firejail/disable-common.inc
include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-programs.inc
include /etc/firejail/whitelist-common.inc

hosts-file ~/.tmp/hosts
caps.drop all
dns 208.67.222.222
dns 208.67.220.220
ipc-namespace
machine-id
netfilter
no3d
nogroups
noroot
nonewprivs
nosound
novideo
protocol unix,inet,inet6,netlink
seccomp

private-dev
private-tmp
noexec ${HOME}
noexec /tmp

Originally created by @ghost on GitHub (Aug 18, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1478 I have most of my personal dotfiles in a single folder for backup ease. Related to this discussion is the result of the following two commands: ``` ln -s ~/.config/pers/wm ~/.config/fontconfig ln -s ~/.config/pers/app/qute ~/.config/qutebrowser ``` + the wm folder contains fonts.conf + the qute folder contains files that usually are in the qutebrowser profile directory + when not using firejail, when launched qutebrowser reads the font configuration right. + when using firejail and having .config/fontconfig/ an actual folder containing fonts.conf, qutebrowser reads the font configuration right My issue appears when ~/.config/fontconfig is a symlink, even though it doesn't appear to be an issue with ~/.config/qutebrowser being one. Here is the whole profile current profile I use: ``` noblacklist ~/.config/qutebrowser whitelist ~/.config/qutebrowser noblacklist ~/.config/pers/app/qute whitelist ~/.config/pers/app/qute noblacklist ~/.config/pers/wm whitelist ~/.config/pers/wm whitelist ~/dl include /etc/firejail/disable-common.inc include /etc/firejail/disable-devel.inc include /etc/firejail/disable-programs.inc include /etc/firejail/whitelist-common.inc hosts-file ~/.tmp/hosts caps.drop all dns 208.67.222.222 dns 208.67.220.220 ipc-namespace machine-id netfilter no3d nogroups noroot nonewprivs nosound novideo protocol unix,inet,inet6,netlink seccomp private-dev private-tmp noexec ${HOME} noexec /tmp ```

gitea-mirror closed this issue

2026-05-05 07:16:35 -06:00

gitea-mirror commented

2026-05-05 07:16:37 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (Dec 9, 2018):

Closing this since the user who opened it closed their Github account. If someone wants to re-open, feel free.

@chiraag-nataraj commented on GitHub (Dec 9, 2018): Closing this since the user who opened it closed their Github account. If someone wants to re-open, feel free.

gitea-mirror referenced this issue

2026-05-05 10:08:25 -06:00

[PR #991] [MERGED] appimage: pass commandline arguments #3815

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#991

No description provided.

Rows
Columns