#1008137 firejail-profiles: Profiles for most web browser blocks mDNS resolution

Package:
firejail-profiles
Source:
firejail
Submitter:
Mad Horse
Date:
2022-04-23 16:27:02 UTC
Severity:
normal
#1008137#5
Date:
2022-03-23 03:44:45 UTC
From:
To:
Dear Maintainer,

I find that I cannot access a web server running in my local lan with its
mDNS domain name with firefox-esr running inside firejail while I can with
firefox-esr running without firejail. This problem also applies to falkon,
chromium, when running inside firejail, but epiphany (gnome web) is not
affected.

I manage to run bash in firejail with profiles of these affected browsers,
and find that /run/avahi-daemon/ does not present in their jailed file
system, so it seems that some rules blacklist, or fail to whitelist this
path in these profiles or included rulesets.
#1008137#10
Date:
2022-03-23 03:56:17 UTC
From:
To:
Currently I walk around this issue by adding "whitelist
/run/avahi-daemon/" to my ~/.config/firejail/whitelist-run-common.local,
but I doubt whether it is appropriate to fix this issue by adding a
similar rule to /etc/firejail/whitelist-run-common.inc