Firejail breaks process substitution

[rusty-snake]

Description

Firejail breaks process substitution which is really hard to find/debug.

For programs that are typically used in shell scripts we could consider to add keep-fd all.

Steps to Reproduce

$ LC_ALL=C firejail --quiet --noprofile cat <(echo hi)
cat: /proc/self/fd/11: No such file or directory

Additional context

firecfg.py has the concept of alias overrides. i.e. you do not use firejail if you call from $PATH but from a interactive shell.

[glitsj16]

Reproduced on Arch Linux with firejail from git master.

For programs that are typically used in shell scripts we could consider to add keep-fd all.

Adding keep-fd all to such profiles would be a welcome addition indeed.