winebth over Firejail

[JoseskVolpe]

I'm trying to run a random executable i downloaded from the internet. It isn't trustable so of course i won't run it insecurely, so i'm using Firejail to sandbox and a new Wineprefix.
Wine works on Firejail with my profile settings. These are my settings:

App profile:

Code: Select all

include ${HOME}/Firejail/Profiles/Include/WineCustom.inc

include ${HOME}/Firejail/Profiles/Include/noshared.inc

whitelist ${HOME}/Firejail/Wine/
whitelist ${HOME}/Downloads/
read-only ${HOME}/Downloads/

net none

WineCustom.inc

Code: Select all

include ${HOME}/Firejail/Profiles/Include/default.inc

default.inc:

Code: Select all

netfilter

caps.drop all
nodvd
nonewprivs
notv
nou2f
novideo
seccomp

private-tmp
private-cache

dbus-user none
dbus-system none

restrict-namespaces

blacklist /kcn
whitelist ${HOME}/.nothing
read-only ${HOME}/.nothing

noshared.inc

Code: Select all

blacklist /run/media/HISPEEDSHARED1
blacklist /run/media/HISPEEDSHARED2

But running the executable on Firejail crashes the software and gives:

Code: Select all

00b8:err:ntoskrnl:ZwLoadDriver failed to create driver L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\winebth": c00000e5

So i went to a guest user i setup in my system, in which has restricted access to my filesystem and deletes data on logout, to run it without Firejail. The software works as it should. That means Firejail is blocking something that prevents the software to run. The software tried to initialize Winebth drivers, which serves to work with BlueZ (Bluetooth daemon), then Firejail blocks that.

¿Any tips to configure my Firejail profile to work with winebth? I already tried removing "caps.drop all" and inserting "protocol unix,bluetooth" and "caps.keep sys_tty_config,sys_rawio"

[JoseskVolpe]

Solved it by removing "dbus-system none" and replacing with "dbus-system.talk org.bluez.*"
Now i've got another issue:

Code: Select all

0070:err:explorer:initialize_display_settings Failed to initialize registry display settings for L"\\\\.\\DISPLAY3".

[JoseskVolpe]

Now i've got another issue:

Code: Select all

0070:err:explorer:initialize_display_settings Failed to initialize registry display settings for L"\\\\.\\DISPLAY3".

Solved this by simple running winecfg, going to Desktop Integration and disabling all shortcuts