Smplayer & vlc is running inside firejail when launched from KDE menu but running outside of firejail when I click on a video file

[firejailaddssecuirty]

Hi,
Two days back I moved from Arch to Debian. I have used sudo firecfg. When I go to the KDE menu and click on smplayer or vlc and check using the command firejail --list I see both smplayer and vlc.

The problem is instead of going to the menu if I right click on any audio/video file and select open with smplayer or vlc and then again check using the command firejail --list I don't see smplayer/vlc.

Its quite troublesome to open smplayer/vlc from the menu every time I want to watch a video or listen to a song.

How do I fix this ?

[rusty-snake]

Does firejail --tree show them? Or better do you firejail dolphin? Because you can not stack firejail sandboxes.

[rusty-snake]

Just for 1 package (firejail) I will have to move to the next release.

https://github.com/netblue30/firejail#debian:

Debian stable (bullseye): We recommend to use the backports package.

[rusty-snake]

Arch repos are small in comparison to Debian.

Small but maintained. Debian has a lot packages that are unmaintaind (for years), don't get updates, are horribly outdated, ...

[firejailaddssecuirty]

In your experience which distro has a good amount of packages and are maintained properly ? Which distro do you use ?

[rusty-snake]

• Everything is better the Ubuntu (because of universe)
• Backporting needs more work than packaging, rolling-release and short-term-release distros have better maintained repos.
• Big distros have better maintained repos than small (community) distros.
• Debian has probably the most packages in their repos
• Arch has the most packages if you count repos+AUR

I use Fedora Linux.

[firejailaddssecuirty]

Haven't used Fedora for sometime now. Downloading now ....

[kmk3]

@firejailaddssecuirty on Mar 26:

Hi, Two days back I moved from Arch to Debian. I have used sudo firecfg.
When I go to the KDE menu and click on smplayer or vlc and check using the
command firejail --list I see both smplayer and vlc.

The problem is instead of going to the menu if I right click on any
audio/video file and select open with smplayer or vlc and then again check
using the command firejail --list I don't see smplayer/vlc.

If you're not indeed firejailing the file manager as @rusty-snake said, what is
the output of this:

grep ^Exec ~/.local/share/applications/smplayer.desktop
grep ^Exec ~/.local/share/applications/vlc.desktop

[firejailaddssecuirty]

$ grep ^Exec ~/.local/share/applications/smplayer.desktop
grep: /home/home/.local/share/applications/smplayer.desktop: No such file or directory

$ grep ^Exec ~/.local/share/applications/vlc.desktop
Exec=vlc --started-from-file %U

[glitsj16]

grep: /home/home/.local/share/applications/smplayer.desktop: No such file or directory

Firecfg didn't create smplayer.desktop it seems. Create one manually to see if that changes anything.

Exec=vlc --started-from-file %U

See VLC not starting with "--started-from-file". It's advised there to drop that part.

[firejailaddssecuirty]

I manually added firejail to /usr/share/applications/smplayer.desktop but still when I click on a video file smplayer is not running inside a sandbox.
What exactly am I supposed to do with the /usr/share/applications/vlc.desktop ?

[glitsj16]

In the firejail --tree output there's:

[...]
21213:home:dolphin:/usr/bin/firejail /usr/bin/dolphin
  21215:home::/usr/bin/firejail /usr/bin/dolphin
    21218:home::/usr/bin/dolphin
[...]

To me that suggests you are in fact running dolphin firejailed...

[firejailaddssecuirty]

I am using KDE after a gap of many years. Under LXQT and XFCE when I run sudo firecfg pcmanfm & thunar are not added to firejail. I have no idea why dolphin is getting added.

[rusty-snake]

dolphin was always special (for no good reasons) as it was the only file-manager in firecfg.config.

[rusty-snake]

In that case I want to continue with dolphin sandboxed. I will launch smplayer/vlc from the KDE menu no matter how annoying it is.

You can try to edit smplayer.desktop like

Exec=systemd-run --user firejail /usr/bin/smplayer