On Mon, Jan 20, 2020 at 05:58:23PM +0100, Hans-Christoph Steiner wrote:
> Turns out some other apps also couldn't start, like Thunderbird.  I
> tracked it down, it was due to me adding the following rules to
> /etc/firejail/whitelist-common.local:
> 
> whitelist /usr/share/webext
> read-only /usr/share/webext
> 
> I need that to let Firefox start properly, but I suppose there is a
> better fix.
> 

The upstream fix for the firefox problem is to add
whitelist /usr/share/webext
into firefox.profile.

If you add it to whitelist-common, that means that /usr/share (the
parent directory) is blocked _except_ /usr/share/webext (and others that
are whitelisted inside /usr/share).
Signal probably needs to access other files in /usr/share that got
blocked in this way.

Regards,
  Reiner

Attachment: signature.asc
Description: PGP signature

Reply via email to