Firejail symlink for firefox does not work because of wrapper script

[MarcS]

When setting up a jailed firefox via `ln -s /usr/bin/firejail /usr/local/bin/firefox`, firefox fails to start with a "profile inaccessible" message.

This happens because /usr/bin/firefox is a symlink to /usr/lib/firefox/firefox.sh, which makes firejail look for "firefox.sh.profile", which is not available. Firejail then uses a default profile which is too restrictive for firefox.

I have worked around this by symlinking ~/.config/firejail/firefox.sh.profile to /etc/firejail/firefox.profile. The package should probably provide a similar symlink in /etc/firejail to make this work out of the box.

NOTE: The same seems to apply to thunderbird.

[Reiner Herrmann (deki)]

An upstream issue for symlinked programs not using the profile of the symlink source is already existing:
https://github.com/netblue30/firejail/issues/690

[Reiner Herrmann (deki)]

@ MarcS: the issue with the symlink to the firefox.sh wrapper is fixed in 0.9.40, which is available in Yakkety, or backported in my PPA (ppa:deki/firejail).
A more general fix will also be available in the next upstream release (0.9.42).