netblue30 / firejail

Linux namespaces and seccomp-bpf sandbox
https://firejail.wordpress.com
GNU General Public License v2.0
5.68k stars 557 forks source link

tutanota: freezes after downloading attachment (AppImage) #4866

Open CocoR55 opened 2 years ago

CocoR55 commented 2 years ago

Description

Bug with the last version 3.89.25 of tutanota (tutanota-desktop-linux.AppImage) under firejail However it is possible to to read messages to send messages with attached files to receive messages with attached files to download an attachment but once the file is downloaded, the tutanota application does not answer anymore... "please wait". /run/firefail/appimage/tutanota-desktop --field-trial-handle=2.....2 --disable-features=SpareRebderFor....... .. You have to kill it.

Steps to Reproduce

Steps to reproduce the behavior:

Menu/internet/Tutanota/Identification/password
Open a message with an attachment.
Download file.
See bug: "the tutanota application does not answer anymore"

Expected behavior

After file downloaded, tutanota can answer and continue to work.

Actual behavior

After file downloaded, tutanota cannot answer and does not continue to work.

Behavior without a profile

Tutanota + firejail + noprofile, no issue. However, tutanota+firejail+profile=/home/leloup/.config/firejail/tutanota-desktop.profile, the downloading issue is reproduced.

Additional context

If the file is downloaded without using the application, there is no bug. It seems to me that the problem did not exist at the beginning of its use. Tests with V3.89.20, instead of V3.89.25, give the same problem. Tutanota installed on another PC with Linux Mint Xfce instead of Cinnamon, tutanota+firejail+profile=/home/leloup/.config/firejail/tutanota-desktop.profile. In this case, a window opens each time asking which application manages the files. I enter thunar. Downloading is made without issu

Environment

OS: Linux Mint Cinnamon 20.2
Firefox: 95.0.1
Firejail version 0.9.66AD`).

Checklist

glitsj16 commented 2 years ago

I've never used tutanota but it might be an issue stemming from private-etc. Things you can try right now to see if they fix the issue:

But these are longshots and without knowing what exactly is in your ~/.config/firejail/tutanota-desktop.profile this is stabbing in the dark. Can you post that file here please? Also post electron override if you have that, as the tutanota-desktop.profile includes that one.

CocoR55 commented 2 years ago

Thank you for your message To check a possible interaction, I have completely uninstalled Flatpak from my PC. I still have the problem.

CocoR55 commented 2 years ago

I'm not sure I understand. I typed either firejail ignore private-etc and the command is not found or firejail --ignore private-etc and Error: invalid --ignore command line optio

CocoR55 commented 2 years ago

tutanota-desktop.profile is the same like https://github.com/netblue30/firejail/pull/3870/commits/70ef3de4b62ddb9577083d9656732a679a43a7c8

glitsj16 commented 2 years ago

I'm not sure I understand. I typed either firejail ignore private-etc and the command is not found or firejail --ignore private-etc and Error: invalid --ignore command line optio

For CLI: --ignore=private-etc --private-etc=mime.types,xdg

For .profile or .local: ignore private-etc private-etc mime.types,xdg

If ~/.config/firejail/tutanota-desktop.local doesn't exist (and you don't have it in /etc/firejail either), you'll have to create it.

CocoR55 commented 2 years ago

Following your instruction, inside /etc/firejail:

$ cat tutanota-desktop.profile
?HAS_APPIMAGE: ignore private-dev
ignore private-etc
private-etc mime.types,xdg
private-etc alternatives,ca-certificates,crypto-policies,fonts,ld.so.cache,ld.so.conf,ld.so.conf.d,ld.so.preload,machine-id,nsswitch.conf,pki,resolv.conf,ssl
private-opt tutanota-desktop
$ firejail --ignore=private-etc --private-etc=mime.types,xdg --appimage \
  --profile=/etc/firejail/tutanota-desktop.profile \
  /home/Leloup/Tutanota/tutanota-desktop-linux.AppImage

Result is: a window with:

The server could not be reached, you seem to be offline. Please try again later.
CocoR55 commented 2 years ago

tutanota-desktop.profile.txt

CocoR55 commented 2 years ago

tutanota_desktop.log tutanota_desktop_old.log

CocoR55 commented 2 years ago

Linux stack trace: The package that provides /run/firejail/appimage/tutanota-desktop is not found.

CocoR55 commented 2 years ago

With the version v3.91.3, this is the same.