{"action":"created","issue":{"url":"https://api.github.com/repos/netblue30/firejail/issues/175","labels_url":"https://api.github.com/repos/netblue30/firejail/issues/175/labels{/name}","comments_url":"https://api.github.com/repos/netblue30/firejail/issues/175/comments","events_url":"https://api.github.com/repos/netblue30/firejail/issues/175/events","html_url":"https://github.com/netblue30/firejail/issues/175","id":119374437,"number":175,"title":"using links in sandboxed firefox","user":{"login":"Micha-Btz","id":4420944,"avatar_url":"https://avatars.githubusercontent.com/u/4420944?v=3","gravatar_id":"","url":"https://api.github.com/users/Micha-Btz","html_url":"https://github.com/Micha-Btz","followers_url":"https://api.github.com/users/Micha-Btz/followers","following_url":"https://api.github.com/users/Micha-Btz/following{/other_user}","gists_url":"https://api.github.com/users/Micha-Btz/gists{/gist_id}","starred_url":"https://api.github.com/users/Micha-Btz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Micha-Btz/subscriptions","organizations_url":"https://api.github.com/users/Micha-Btz/orgs","repos_url":"https://api.github.com/users/Micha-Btz/repos","events_url":"https://api.github.com/users/Micha-Btz/events{/privacy}","received_events_url":"https://api.github.com/users/Micha-Btz/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/netblue30/firejail/labels/information","name":"information","color":"f7c6c7"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2015-11-29T18:01:35Z","updated_at":"2015-12-08T21:24:10Z","closed_at":null,"body":"hi there,\r\n\r\njust a usability question related to sandboed processes. i use firejail for pidgin, icedove, skype and\r\niceweasel. if i get a link in one of these apps, the reactions are different:\r\n\r\npidgin / skype: /usr/bin/iceweasel %u - not found\r\nicedove: seems to open a new ifrefox instance, the result is, that all tabs set as start page are opened, but not the link i pushed\r\n\r\ni think it is clear, the processes are separated from each other but is it possible to let this communicate?\r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/netblue30/firejail/issues/comments/163021958","html_url":"https://github.com/netblue30/firejail/issues/175#issuecomment-163021958","issue_url":"https://api.github.com/repos/netblue30/firejail/issues/175","id":163021958,"user":{"login":"netblue30","id":13711990,"avatar_url":"https://avatars.githubusercontent.com/u/13711990?v=3","gravatar_id":"","url":"https://api.github.com/users/netblue30","html_url":"https://github.com/netblue30","followers_url":"https://api.github.com/users/netblue30/followers","following_url":"https://api.github.com/users/netblue30/following{/other_user}","gists_url":"https://api.github.com/users/netblue30/gists{/gist_id}","starred_url":"https://api.github.com/users/netblue30/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/netblue30/subscriptions","organizations_url":"https://api.github.com/users/netblue30/orgs","repos_url":"https://api.github.com/users/netblue30/repos","events_url":"https://api.github.com/users/netblue30/events{/privacy}","received_events_url":"https://api.github.com/users/netblue30/received_events","type":"User","site_admin":false},"created_at":"2015-12-08T21:24:10Z","updated_at":"2015-12-08T21:24:10Z","body":"> which version of thunderbird and firefox you use? i use for both the esr 38.x\r\n\r\nI am on Debian jessie, with both of them on 38.4\r\n`````\r\n$ iceweasel --version\r\nMozilla Iceweasel 38.4.0\r\n$ icedove --version\r\n Icedove 38.4.0\r\n`````\r\n\r\n> Warning: an existing sandbox was detected. iceweasel will run without any additional sandboxing features in a /bin/sh shell\r\nDon't worry about this one. In case you already have a sandbox running, it will not allow you to start another sandbox inside it. Instead, it will start your program as is.\r\n\r\nLet's try to debug it. Without iceweasel running, I start icedove in a xterm:\r\n`````\r\n$ firejail icedove\r\n`````\r\nI click on a link in an email, this opens iceweasel with the new link. After this I open another xterm and run:\r\n`````\r\n$ firejail --tree\r\n6237:netblue:firejail icedove \r\n  6238:netblue:firejail icedove \r\n    6239:netblue:icedove \r\n    6317:netblue:iceweasel https://github.com/netblue30/firejail/issues/175#issuecomment-162614147\r\n`````\r\nThe command prints all the processes for all sandboxes running. I have a single sandbox (6237), and inside it I have two processes: icedove (6239) and iceweasel (6317). Notice how iceweasel was started with a url, This is the link I've clicked in iceweasel. Try this command, maybe the url is not passed to iceweasel.\r\n\r\nYou can also use firemon utility (distributed with firejail) to debug it. It will tell you what processes are started in the sandbox. You run \"sudo firemon\" in a separate xterm before you start icedove, and as you start the sandbox, the messages will start coming:\r\n`````\r\n $ sudo firemon\r\n12:00:58 uid  6237 (root) NEW SANDBOX: firejail icedove \r\n12:00:58 exec 6237 (netblue) firejail icedove \r\n12:00:58 fork 6237 (netblue) firejail icedove \r\n\tchild 6238 firejail icedove \r\n12:00:58 fork 6238 (netblue) firejail icedove \r\n\tchild 6239 firejail icedove \r\n12:00:58 uid  6239 (netblue) /bin/bash -c \"icedove\"  \r\n12:00:58 exec 6239 (netblue) /bin/bash -c \"icedove\"  \r\n12:00:58 exec 6239 (netblue) icedove \r\n12:00:58 fork 6239 (netblue) icedove \r\n\tchild 6240 icedove \r\n12:00:59 exit 6240 (netblue)\r\n12:01:08 fork 6239 (netblue) icedove \r\n\tchild 6316 icedove \r\n12:01:08 fork 6316 (netblue)\r\n\tchild 6317 icedove \r\n12:01:08 exit 6316 (netblue)\r\n12:01:08 exec 6317 (netblue) iceweasel https://github.com/netblue30/firejail/issues/175#issuecomment-162614147 \r\n12:01:08 fork 6317 (netblue) iceweasel https://github.com/netblue30/firejail/issues/175#issuecomment-162614147 \r\n\tchild 6321 iceweasel https://github.com/netblue30/firejail/issues/175#issuecomment-162614147 \r\n12:01:08 exit 6321 (netblue)\r\n`````\r\nYou monitor here if the link is passed down to iceweasel.\r\n\r\n"}}