Linux App exclusions lose track of running applications when daemon is restarted

[data-sync-user]

On the Linux platform. App exclusions require a mapping between control groups and the running applications. This mapping is established by capturing launch events from the desktop environment and correlating them against the .desktop file ID. This approach carries with it an obvious flaw: When the daemon is restarted (eg: by updating the VPN software) it looses this mapping and can no longer apply app exclusions until the apps are restarted as well.

Affected devices:

• Ubuntu 20.04 and later;
• Fedora 36 and later;

Prerequisites:

• Have a subscription made for Mozilla VPN;
• Have Mozilla VPN installed;
• Have Mozilla VPN closed and OFF;

Steps to reproduce:

1. Start a Firefox browser session.
2. Update the Mozilla VPN client by re-installing the .deb file or restart the daemon with sudo systemctl restart mozillavpn
3. Open the VPN and sign-in if required;
4. Navigate to Settings > App Permissions;
5. Check the Firefox browser;
6. Turn the VPN ON;
7. In Firefox access thehttps://whatismyipaddress.com/
8. Observe the displayed IP address and location;

Expected result:

• The real IP address is displayed;

Actual result:

• The VPN IP address is displayed even if the browser is checked in app permission;

┆Issue is synchronized with this Jira Bug
┆Reporter: Naomi Kirby

[data-sync-user]

➤ Betty Fleming commented:

Not 2.15 blocker. Naomi Kirby do you want to weigh in on priority?

[data-sync-user]

➤ Valentina Virlics commented:

Verified this while using Mozilla VPN v. 2.20.0 (2.20.0~build20231218) across Linux 20.04, 22.04, 23.04 and 23.10 versions.

App exclusion work as expected → checking the Firefox browser in the app exclusions list inside de VPN client triggers the real IP to be displayed in the Firefox browser.

!image-20231219-121249.png|width=1364,height=628!