telegram-desktop not working with firejail

[piorunz]

Hi all,

I have used telegram-desktop with firejail on Debian 10. Everything was
working fine. Two days ago, I upgraded my OS to Debian Bookworm
(testing). System is clean and everything else is working. Only
telegram-desktop is failing to work with firejail profile.

Terminal output:
$ firejail telegram-desktop
Reading profile /etc/firejail/telegram-desktop.profile
Reading profile /etc/firejail/telegram.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/disable-shell.inc
Reading profile /etc/firejail/disable-xdg.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-runuser-common.inc
Reading profile /etc/firejail/whitelist-usr-share-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 825717, child pid 825720
Warning: An abstract unix socket for session D-BUS might still be available.
Use --net or remove unix from --protocol set.
Warning: skipping crypto-policies for private /etc
Warning: skipping pki for private /etc
Warning fcopy: skipping /etc/pulse/client.conf.d/01-enable-autospawn.conf,
cannot find inode
Private /etc installed in 13.33 ms
Private /usr/etc installed in 0.00 ms
Child process initialized in 81.10 ms

Parent is shutting down, bye...

Something is wrong with firejail profile? Any suggestions? TIA!

--
With kindest regards, Piotr.

⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/
⠈⠳⣄⠀⠀⠀⠀

[piorunz]

I forget to write to the list. At the moment, firejail's Telegram
profile is broken. I solved this by commenting out all lines and
enabling them one by one, until I found what is broken.

Edit /etc/firejail/telegram.profile file. Comment out lines:

#include disable-shell.inc
#include whitelist-usr-share-common.inc
#include whitelist-var-common.inc

Without this, Telegram Desktop will not work with firejail in Bookworm.

[piorunz]

Another solution found:

Add this line to /etc/firejail/telegram.profile:
whitelist /usr/share/TelegramDesktop

Solved that way!