Firejail: Desktop integration does not work with Google Play Music desktop player profile

[semente]

I can run Google Play Music and listen to music just fine, but some features aren't working such as desktop keyboard shortcuts and GNOME Shell integration.

I'm running firejail version 0.9.50 on a Debian stable (stretch) machine.

Thanks!

PS: @figue do you have this issue?

[figue]

Yes I have. Currently I'm launching GPMDP without firejail and Cinnamon desktop integration works just fine, but with firejail that integration is broken. I've tried debugging what's wrong, but I can't find the reason.

Here is a debug output:

https://gist.github.com/figue/f0eb8420309f6e2e6e93b281a510104b

firejail 0.9.50 running in Archlinux, community repository build.

Edit: I think it's something related with avahi (Bonjour), as it says here:

error: Failed to load bonjour with error: {}
Bonjour is required to use Chromecast Support or to enable ZeroConf for the PlaybackAPI
On linux you need to install "avahi"
error: Could not initialize bonjour service with error: {}

Edit2: Running gpmdp with --noprofile works just fine... But I can't find which profile setting is breaking desktop integration or what is missing into it.

[SkewedZeppelin]

I doubt its anything to do with avahi, more likely MPRIS.
Can one of you comment out all the options (ignoring whitelist/blacklist/includes) and uncomment them one by one until it breaks?

[figue]

Thanks @SpotComms I can confirm that the problem is "noexec /tmp".

https://github.com/netblue30/firejail/blob/master/etc/google-play-music-desktop-player.profile (line 38)

It seems that GPMDP generate some files in /tmp that need to execute. For example:

[figue@DESA2338 ~]$ ls -dla /tmp/.*chromium*
-rwxr-xr-x 1 figue users  81690 oct 24 15:58 /tmp/.org.chromium.Chromium.9Zx35g
-rwxr-xr-x 1 figue users 122606 oct 24 15:58 /tmp/.org.chromium.Chromium.gIObAn
-rwxr-xr-x 1 figue users 122606 oct 24 15:58 /tmp/.org.chromium.Chromium.J6VXlY
drwx------ 2 figue users     80 oct 24 15:58 /tmp/.org.chromium.Chromium.KE1WLF
-rwxr-xr-x 1 figue users  20074 oct 24 15:58 /tmp/.org.chromium.Chromium.r6gUnZ

Could be safely disabled that option?
Thanks

[semente]

Cool, thanks guys!