Crocket
`--join-or-start=program` shouldn't create `program-PID` sandboxes if multiple instances try to start simultaneously.
If my bookmark manager tries to open multiple bookmarks by launching multiple invocations of firejail --join-or-start=librewolf librewolf URL
simultaneously, the first invocation creates librewolf
sandbox and some of subsequent invocations end up creating librewolf-PID
sandboxes.
If multiple firejail invocations are trying to launch simultaneously with --join-or-start=program
, the first invocation should reserve a named sandbox which subsequent invocations wait for before joining the named sandbox.
Because not all invocations of librewolf join the same sandbox, I had to insert
ignore private-tmp
ignore dbus-user
into librewolf.local
in order to launch multiple bookmarks simultaneously on librewolf.
If --join-or-start
was good at putting all simultaneous invocations of firejail in one named sandbox, I didn't need to make all librewolf instances share /tmp and dbus with programs outside sandbox.
Forked On 10 Jun 2022 at 01:20:21