[GH-ISSUE #1685] firemon and proc hidepid not working for regular user #1140

Closed
opened 2026-05-05 07:31:30 -06:00 by gitea-mirror · 3 comments
Owner

Originally created by @atelszewski on GitHub (Dec 18, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1685

Hi,

I have /proc mounted with hidepid like that:
proc on /proc type proc (rw,hidepid=2,gid=2001)

I have my user added to the "showpid" group like that:

$ grep showpid /etc/group
showpid:x:2001:antezu

Using htop, I'm able to view other users' processes.

But when I try firemon --tree, I get:
Error: /proc is mounted hidepid, you would need to be root to run this command

Is there something wrong on my side or firejail's?

Thanks!

--
Best regards,
Andrzej Telszewski

Originally created by @atelszewski on GitHub (Dec 18, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1685 Hi, I have /proc mounted with hidepid like that: `proc on /proc type proc (rw,hidepid=2,gid=2001)` I have my user added to the "showpid" group like that: ``` $ grep showpid /etc/group showpid:x:2001:antezu ``` Using htop, I'm able to view other users' processes. But when I try firemon --tree, I get: `Error: /proc is mounted hidepid, you would need to be root to run this command` Is there something wrong on my side or firejail's? Thanks! -- Best regards, Andrzej Telszewski
gitea-mirror 2026-05-05 07:31:30 -06:00
Author
Owner

@netblue30 commented on GitHub (Dec 18, 2017):

hidepid will prevent firemon tool to access pid information for root processes. Grab the latest version from git main, and use "firejail --tree" instead. I put some fixes in to allow firejail to access all pid information. You can also run firemon as root (sudo firemon --tree).

<!-- gh-comment-id:352447224 --> @netblue30 commented on GitHub (Dec 18, 2017): hidepid will prevent firemon tool to access pid information for root processes. Grab the latest version from git main, and use "firejail --tree" instead. I put some fixes in to allow firejail to access all pid information. You can also run firemon as root (sudo firemon --tree).
Author
Owner

@atelszewski commented on GitHub (Dec 19, 2017):

Hi,

I'm using version 0.9.52.

I tried "firejail --tree" and it works, although it gives some errors at the end and I don't know if they are any relevant:

$ firejail --tree
1522:antezu:/usr/bin/firejail /usr/bin/thunderbird 
  1528:antezu:/usr/bin/firejail /usr/bin/thunderbird 
    1587:antezu:/usr/bin/thunderbird 
1524:antezu:/usr/bin/firejail /usr/bin/liferea 
  1532:antezu:/usr/bin/firejail /usr/bin/liferea 
    1690:antezu:/usr/bin/liferea 
(...)
5008:antezu:firejail --tree 

Error: netlink socket problem
Error: failed to run /usr/bin/firemon

Anyway, I'm not using this functionality heavily and I'm not going to test the git version.
Mostly, I wanted to signal the possible problem and know what is the solution.

You might close this issue, since I'm satisfied with the reply ;-)

Thanks!

--
Best regards,
Andrzej Telszewski

<!-- gh-comment-id:352698356 --> @atelszewski commented on GitHub (Dec 19, 2017): Hi, I'm using version 0.9.52. I tried "firejail --tree" and it works, although it gives some errors at the end and I don't know if they are any relevant: ``` $ firejail --tree 1522:antezu:/usr/bin/firejail /usr/bin/thunderbird 1528:antezu:/usr/bin/firejail /usr/bin/thunderbird 1587:antezu:/usr/bin/thunderbird 1524:antezu:/usr/bin/firejail /usr/bin/liferea 1532:antezu:/usr/bin/firejail /usr/bin/liferea 1690:antezu:/usr/bin/liferea (...) 5008:antezu:firejail --tree Error: netlink socket problem Error: failed to run /usr/bin/firemon ``` Anyway, I'm not using this functionality heavily and I'm not going to test the git version. Mostly, I wanted to signal the possible problem and know what is the solution. You might close this issue, since I'm satisfied with the reply ;-) Thanks! -- Best regards, Andrzej Telszewski
Author
Owner

@netblue30 commented on GitHub (Dec 21, 2017):

Error: netlink socket problem

I put a fix in git for it, thanks!

<!-- gh-comment-id:353356821 --> @netblue30 commented on GitHub (Dec 21, 2017): >Error: netlink socket problem I put a fix in git for it, thanks!
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1140
No description provided.