[GH-ISSUE #1591] firejail firefox has no DNS in some? setups #1062

Closed
opened 2026-05-05 07:22:53 -06:00 by gitea-mirror · 1 comment
Owner

Originally created by @sie64 on GitHub (Oct 5, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1591

I have "the same" (or so I believe) setup on two computers but on one the firejail firefox stopped working a few weeks/months ago; Firefox opens but has no DNS lookup access. When I join the sandbox with a shell and call nslookup it times out, too, which rules out a firefox issue. I am on firejail version 0.9.50 and the current Mozilla Firefox. I have already tried reinstalling firejail incl. purging of /etc/firejail, and adding a new Linux user (and trying the same with that user) but to no avail. There is no relevant information in messages or on stdout/stderr:

firejail firefox
Reading profile /etc/firejail/firefox.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Parent pid 3854, child pid 3855
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Blacklist violations are logged to syslog
Child process initialized in 68.55 ms

further error messages clearly stem from the inability to connect to the Internet via DNS. Direct access to an IP address works!

Both computers run Arch Linux with an up-to-date "hardened" Linux kernel.

Originally created by @sie64 on GitHub (Oct 5, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1591 I have "the same" (or so I believe) setup on two computers but on one the `firejail firefox` stopped working a few weeks/months ago; Firefox opens but has no DNS lookup access. When I join the sandbox with a shell and call `nslookup` it times out, too, which rules out a firefox issue. I am on firejail version 0.9.50 and the current Mozilla Firefox. I have already tried reinstalling firejail incl. purging of `/etc/firejail`, and adding a new Linux user (and trying the same with that user) but to no avail. There is no relevant information in messages or on stdout/stderr: ``` firejail firefox Reading profile /etc/firejail/firefox.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-common.inc Parent pid 3854, child pid 3855 Warning: /sbin directory link was not blacklisted Warning: /usr/sbin directory link was not blacklisted Blacklist violations are logged to syslog Child process initialized in 68.55 ms ``` further error messages clearly stem from the inability to connect to the Internet via DNS. Direct access to an IP address works! Both computers run Arch Linux with an up-to-date "hardened" Linux kernel.
gitea-mirror 2026-05-05 07:22:53 -06:00
Author
Owner

@netblue30 commented on GitHub (Oct 6, 2017):

There are some problems with our systemd resolver integration. We have a fix on mainline git, you can try it out.

<!-- gh-comment-id:334749301 --> @netblue30 commented on GitHub (Oct 6, 2017): There are some problems with our systemd resolver integration. We have a fix on mainline git, you can try it out.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1062
No description provided.