Access error: uid 1000, last mount name:/ dir:/run/user/1000/doc type:fuse.portal - invalid read-only mount

[Dieterbe]

i notice the above line as a "critical" message in my journal.

none of my configs in .config/firejail mentions /run/user (i only have a noblacklist /run/media in udiskie.local)

i read on this page that /run/user/1000/doc is a directory for flatpack, but i don't have a single process running matching "flat". I don't think i use flatpacks, but i guess i can't be 100% sure, so i did some quick searching and not much came up with these commands:

~ ❯❯❯ for f in $(locate '\.desktop'); do [ -f $f ] && grep -i flat $f; done | grep '^Exec'
grep: /opt/android-studio/lib/modules/intellij.libraries.compose.foundation.desktop.jar: binary file matches
grep: /usr/lib/jvm/java-17-openjdk/jmods/java.desktop.jmod: binary file matches
~ ❯❯❯ pacman -Qs flatpack
~ ❯❯❯ 

any idea where this might originate from and what i can do to fix it?
it would be nice if such errors would mention the applicable profile/application, but i imagine that could be quite difficult.

thanks!

[Dieterbe]

it seems to alternate with a slightly different error:

firejail: Access error: uid 1000, last mount name:/ dir:/run/user/1000/doc type:fuse.portal - invalid whitelist mount

[Dieterbe]

aha coincidentally i was looking at my flameshot service, seems that's the one:

Dec 29 19:30:51 xps systemd[2190]: Started Flameshot.
Dec 29 19:30:51 xps firejail[2445]: Access error: uid 1000, last mount name:/ dir:/run/user/1000/doc type:fuse.portal - invalid whitelist mount
Dec 29 19:30:53 xps flameshot[2445]: Access error: uid 1000, last mount name:/ dir:/run/user/1000/doc type:fuse.portal - invalid whitelist mount

[kmk3]

i read on this
page
that /run/user/1000/doc is a directory for flatpack, but i don't have a
single process running matching "flat". I don't think i use flatpacks, but i
guess i can't be 100% sure, so i did some quick searching and not much came
up with these commands:

~ ❯❯❯ for f in $(locate '\.desktop'); do [ -f $f ] && grep -i flat $f; done | grep '^Exec'
grep: /opt/android-studio/lib/modules/intellij.libraries.compose.foundation.desktop.jar: binary file matches
grep: /usr/lib/jvm/java-17-openjdk/jmods/java.desktop.jmod: binary file matches
~ ❯❯❯ pacman -Qs flatpack
~ ❯❯❯ 

flatpak, not flatpack.

Closing as it seems to be flatpak-related.

If that is not the case, please use the following link to report a bug and
follow the template:

• https://github.com/netblue30/firejail/issues/new?template=bug_report.md