firefox: cannot communicate with KeePassXC #5447
Projects
Comments
|
Confirmed. Here is some further information: So it cannot mkdir("/run/user/1000/app/org.keepassxc.KeePassXC", 0777) because access denied. Here is my firefox.profile: I tried to add but that gives the same errors. |
|
Closing. @gellnerm - @rusty-snake's latest comment in #5444 is the solution. No other edits to |
|
Reopening as reminder to fix this for the next release. |
|
|
qdii
added a commit
to qdii/firejail
that referenced
this issue
Jun 22, 2024
KeePassXC browser extension look for KeePassXC in the /run/user/app directory (https://github.com/keepassxreboot/keepassxc/blob/6b1ab1a5edd66ac10706a2fb5af34ec9458a901d/src/browser/BrowserShared.cpp\#L41). Unfortunately, /run/user/app seems to be blacklisted in disable-common.inc under the flatpak section (https://github.com/netblue30/firejail/blob/b89ec818926b4bcd3a58bb4e2a67b68a8090ba1c/etc/inc/disable-common.inc\#L667), as a result, KeePassXC extension cannot connect to it. Fixes netblue30#5447
qdii
added a commit
to qdii/firejail
that referenced
this issue
Jul 3, 2024
The KeePassXC browser extension looks for the KeePassXC socket at
`${RUNUSER}/app/org.keepassxc.KeePassXC`[1].
But `${RUNUSER}/app` seems to be blacklisted in disable-common.inc under the
flatpak section[2], so the KeePassXC extension cannot connect to it.
Fixes netblue30#5447.
[1] https://github.com/keepassxreboot/keepassxc/blob/6b1ab1a5edd66ac10706a2fb5af34ec9458a901d/src/browser/BrowserShared.cpp#L41
[2] https://github.com/netblue30/firejail/blob/b89ec818926b4bcd3a58bb4e2a67b68a8090ba1c/etc/inc/disable-common.inc#L667
kmk3
pushed a commit
to qdii/firejail
that referenced
this issue
Jul 7, 2024
The KeePassXC browser extension looks for the KeePassXC socket at
`${RUNUSER}/app/org.keepassxc.KeePassXC`[1].
But `${RUNUSER}/app` seems to be blacklisted in disable-common.inc under the
flatpak section[2], so the KeePassXC extension cannot connect to it.
Fixes netblue30#5447.
[1] https://github.com/keepassxreboot/keepassxc/blob/6b1ab1a5edd66ac10706a2fb5af34ec9458a901d/src/browser/BrowserShared.cpp#L41
[2] https://github.com/netblue30/firejail/blob/b89ec818926b4bcd3a58bb4e2a67b68a8090ba1c/etc/inc/disable-common.inc#L667
kmk3
pushed a commit
to qdii/firejail
that referenced
this issue
Jul 7, 2024
The KeePassXC browser extension looks for the KeePassXC socket at
`${RUNUSER}/app/org.keepassxc.KeePassXC`[1].
But `${RUNUSER}/app` seems to be blacklisted in disable-common.inc under the
flatpak section[2], so the KeePassXC extension cannot connect to it.
Fixes netblue30#5447.
[1] https://github.com/keepassxreboot/keepassxc/blob/6b1ab1a5edd66ac10706a2fb5af34ec9458a901d/src/browser/BrowserShared.cpp#L41
[2] https://github.com/netblue30/firejail/blob/b89ec818926b4bcd3a58bb4e2a67b68a8090ba1c/etc/inc/disable-common.inc#L667
kmk3
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Description
KeePassXC-Browser fails to communicate with KeePassXC (2.7.1-1, 2.7.4-1) using Firefox 106.0.3-1. Firefox 106.0.2-1 was working just fine.
Versions of KeePassXC tested : 2.7.1-1, 2.7.4-1
Steps to Reproduce
Running either of the versions of KeePassXC listed above, run Firefox 106.0.3-1 (I'm on Arch Linux, I'd assume behavior is the same elsewhere).
LC_ALL=C firejail keepassxcLC_ALL=C firejail firefoxLC_ALL=C firejail --noprofile firefoxafter closing the previous instance - communication will succeed.Expected behavior
Successful key exchange/native-messaging-hosts transmission via keepassxc-proxy
Actual behavior
Key exchange failure/no transmission of username/password.
Behavior without a profile
KeePassXC is fine to run with a profile, Firefox is not. Using
--noprofileon Firefox allows the communication from KeePassXC to KeePassXC-BrowserAdditional context
Any other detail that may help to understand/debug the problem
Environment
All KeePassXC-Browser relevant options enabled in
firefox.profile(+ private-etc),firefox-common.profile(for private-etc),firefox-common-addons.profile,keepassxc.profile,Checklist
/usr/bin/vlc) "fixes" it).https://github.com/netblue30/firejail/issues/1139)browser-allow-drm yes/browser-disable-u2f noinfirejail.configto allow DRM/U2F in browsers.Log
Output of
LC_ALL=C firejail firefoxOutput of `Debug Addon` console
The text was updated successfully, but these errors were encountered: