github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6

[GH-ISSUE #1699] Can't launch qBittorrent and okular with firejail aymore #1147

New issue
Closed
opened 2026-05-05 07:32:17 -06:00 by gitea-mirror · 6 comments
gitea-mirror commented 2026-05-05 07:32:17 -06:00
Owner
Copy link

Originally created by @Alin1agh on GitHub (Dec 29, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1699

After last update, can't launch qbittorrent and okular with firejail. (Arch/kde/x64)

[user@machine]: ~>$ firejail qbittorrent
Reading profile /etc/firejail/qbittorrent.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 1892, child pid 1893
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Child process initialized in 66.07 ms
Icon theme "gnome" not found.

[user@machine]: ~>$ firejail okular
Reading profile /etc/firejail/okular.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 1980, child pid 1981
Warning: skipping alternatives for private /etc
Warning: skipping cups for private /etc
Private /etc installed in 2.44 ms
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Blacklist violations are logged to syslog
Child process initialized in 58.15 ms
Icon theme "gnome" not found.
Icon theme "gnome" not found.
mprotect failed in ExecutableAllocator::makeExecutable: Permission denied
*** stack smashing detected ***: terminated

Parent is shutting down, bye...

Originally created by @Alin1agh on GitHub (Dec 29, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1699 After last update, can't launch qbittorrent and okular with firejail. (Arch/kde/x64) [user@machine]: ~>$ firejail qbittorrent Reading profile /etc/firejail/qbittorrent.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-passwdmgr.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-var-common.inc Parent pid 1892, child pid 1893 Warning: /sbin directory link was not blacklisted Warning: /usr/sbin directory link was not blacklisted Child process initialized in 66.07 ms Icon theme "gnome" not found. [user@machine]: ~>$ firejail okular Reading profile /etc/firejail/okular.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-passwdmgr.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-var-common.inc Parent pid 1980, child pid 1981 Warning: skipping alternatives for private /etc Warning: skipping cups for private /etc Private /etc installed in 2.44 ms Warning: /sbin directory link was not blacklisted Warning: /usr/sbin directory link was not blacklisted Blacklist violations are logged to syslog Child process initialized in 58.15 ms Icon theme "gnome" not found. Icon theme "gnome" not found. mprotect failed in ExecutableAllocator::makeExecutable: Permission denied *** stack smashing detected ***: <unknown> terminated Parent is shutting down, bye...
gitea-mirror commented 2026-05-05 07:32:23 -06:00
Author
Owner
Copy link

@smitsohu commented on GitHub (Dec 30, 2017):

Could you create ~/.config/firejail/qbittorrent.profile and paste this into that file?

For Okular run sudo echo "env QML_DISABLE_DISK_CACHE=1" >> /etc/firejail/disable-common.inc and try it again.

<!-- gh-comment-id:354539807 --> @smitsohu commented on GitHub (Dec 30, 2017): Could you create ~/.config/firejail/qbittorrent.profile and paste [this](https://raw.githubusercontent.com/netblue30/firejail/master/etc/qbittorrent.profile) into that file? For Okular run `sudo echo "env QML_DISABLE_DISK_CACHE=1" >> /etc/firejail/disable-common.inc` and try it again.
gitea-mirror commented 2026-05-05 07:32:25 -06:00
Author
Owner
Copy link

@NathanC commented on GitHub (Dec 30, 2017):

@smitsohu I just tried appending that above command to disable-common.inc for Okular (I was having the same issue as @Alin1agh ), and now I get this:

Reading profile /etc/firejail/okular.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Warning: noroot option is not available
Parent pid X, child pid X+1
The new log directory is /proc/X+1/root/var/log
Warning: skipping alternatives for private /etc
Warning: skipping cups for private /etc
Private /etc installed in 5.92 ms
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Blacklist violations are logged to syslog
Child process initialized in 41.13 ms
QStandardPaths: XDG_RUNTIME_DIR not set, defaulting to '/tmp/runtime-'
No protocol specified
qt.qpa.screen: QXcbConnection: Could not connect to display :0
Could not connect to any X display.

Parent is shutting down, bye...
<!-- gh-comment-id:354560338 --> @NathanC commented on GitHub (Dec 30, 2017): @smitsohu I just tried appending that above command to `disable-common.inc` for Okular (I was having the same issue as @Alin1agh ), and now I get this: ``` Reading profile /etc/firejail/okular.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-passwdmgr.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-var-common.inc Warning: noroot option is not available Parent pid X, child pid X+1 The new log directory is /proc/X+1/root/var/log Warning: skipping alternatives for private /etc Warning: skipping cups for private /etc Private /etc installed in 5.92 ms Warning: /sbin directory link was not blacklisted Warning: /usr/sbin directory link was not blacklisted Blacklist violations are logged to syslog Child process initialized in 41.13 ms QStandardPaths: XDG_RUNTIME_DIR not set, defaulting to '/tmp/runtime-' No protocol specified qt.qpa.screen: QXcbConnection: Could not connect to display :0 Could not connect to any X display. Parent is shutting down, bye... ```
gitea-mirror commented 2026-05-05 07:32:27 -06:00
Author
Owner
Copy link

@smitsohu commented on GitHub (Jan 1, 2018):

@NathanC Thanks for the feedback. Could you comment env QML_DISABLE_DISK_CACHE=1 in disable-common.inc and run in bash:

diff <(firejail --quiet printenv) <(firejail --quiet --env=QML_DISABLE_DISK_CACHE=1 printenv)
(edited)

The only output should be > QML_DISABLE_DISK_CACHE=1.

<!-- gh-comment-id:354658465 --> @smitsohu commented on GitHub (Jan 1, 2018): @NathanC Thanks for the feedback. Could you comment `env QML_DISABLE_DISK_CACHE=1` in disable-common.inc and run in bash: `diff <(firejail --quiet printenv) <(firejail --quiet --env=QML_DISABLE_DISK_CACHE=1 printenv)` (edited) The only output should be `> QML_DISABLE_DISK_CACHE=1`.
gitea-mirror commented 2026-05-05 07:32:29 -06:00
Author
Owner
Copy link

@Alin1agh commented on GitHub (Jan 3, 2018):

qBittorrent works fine, i've followed your instructions.

For okular i did this:

sudo echo "env QML_DISABLE_DISK_CACHE=1" >> /etc/firejail/disable-common.inc and try it again.

I commented env QML_DISABLE_DISK_CACHE=1 in disable-common.inc

[user@machine]: ~>$ diff <(firejail --quiet printenv) <(firejail --quiet --env=QML_DISABLE_DISK_CACHE=1 printenv)
4a5
The output was: > QML_DISABLE_DISK_CACHE=1

[user@machine]: ~>$ firejail okular
Reading profile /etc/firejail/okular.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 6118, child pid 6119
Warning: skipping alternatives for private /etc
Warning: skipping cups for private /etc
Private /etc installed in 2.52 ms
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Blacklist violations are logged to syslog
Child process initialized in 40.44 ms
Icon theme "gnome" not found.
Icon theme "gnome" not found.
mprotect failed in ExecutableAllocator::makeExecutable: Permission denied
*** stack smashing detected ***: terminated

Parent is shutting down, bye...

<!-- gh-comment-id:355060156 --> @Alin1agh commented on GitHub (Jan 3, 2018): qBittorrent works fine, i've followed your instructions. For okular i did this: sudo echo "env QML_DISABLE_DISK_CACHE=1" >> /etc/firejail/disable-common.inc and try it again. I commented env QML_DISABLE_DISK_CACHE=1 in disable-common.inc [user@machine]: ~>$ diff <(firejail --quiet printenv) <(firejail --quiet --env=QML_DISABLE_DISK_CACHE=1 printenv) 4a5 The output was: > QML_DISABLE_DISK_CACHE=1 [user@machine]: ~>$ firejail okular Reading profile /etc/firejail/okular.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-passwdmgr.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-var-common.inc Parent pid 6118, child pid 6119 Warning: skipping alternatives for private /etc Warning: skipping cups for private /etc Private /etc installed in 2.52 ms Warning: /sbin directory link was not blacklisted Warning: /usr/sbin directory link was not blacklisted Blacklist violations are logged to syslog Child process initialized in 40.44 ms Icon theme "gnome" not found. Icon theme "gnome" not found. mprotect failed in ExecutableAllocator::makeExecutable: Permission denied *** stack smashing detected ***: <unknown> terminated Parent is shutting down, bye...
gitea-mirror commented 2026-05-05 07:32:30 -06:00
Author
Owner
Copy link

@smitsohu commented on GitHub (Jan 4, 2018):

@Alin1agh Ok, if Okular doesn't launch with QML_DISABLE_DISK_CACHE=1 uncommented in /etc/firejail/disable-common.inc, can you try if firejail --ignore=noexec okular works?

Failing all of this, can you please navigate to /etc/firejail/okular.profile? In okular.profile comment everything and then uncomment line after line, checking after each step if Okular starts or fails. Usually it is a single line which causes the problem, and you will find it quickly this way.

<!-- gh-comment-id:355330031 --> @smitsohu commented on GitHub (Jan 4, 2018): @Alin1agh Ok, if Okular doesn't launch with `QML_DISABLE_DISK_CACHE=1` _uncommented_ in /etc/firejail/disable-common.inc, can you try if `firejail --ignore=noexec okular` works? Failing all of this, can you please navigate to /etc/firejail/okular.profile? In okular.profile comment everything and then uncomment line after line, checking after each step if Okular starts or fails. Usually it is a single line which causes the problem, and you will find it quickly this way.
gitea-mirror commented 2026-05-05 07:32:32 -06:00
Author
Owner
Copy link

@Alin1agh commented on GitHub (Jan 5, 2018):

@smitsohu , it works with QML_DISABLE_DISK_CACHE=1 uncommented. I was trying to follow instructions you already gave to @NathanC.
Thank you very much.

<!-- gh-comment-id:355501449 --> @Alin1agh commented on GitHub (Jan 5, 2018): @smitsohu , it works with QML_DISABLE_DISK_CACHE=1 uncommented. I was trying to follow instructions you already gave to @NathanC. Thank you very much.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
master
serialize_remounts_v2
landlock_v4
landlock
release-0.9.64
release-0.9.62
gitlab_ci
LTSbase
fred_ctests
docs
0.9.80
0.9.80-rc1
0.9.78
0.9.76
0.9.76-rc4
0.9.76-rc3
0.9.76-rc2
0.9.76-rc1
0.9.74
landlock-split
0.9.72
0.9.72rc1
0.9.70
0.9.68
0.9.68rc1
0.9.66
0.9.66rc1
0.9.64.4
0.9.64.2
0.9.64
0.9.64rc1
0.9.62.4
0.9.62.2
0.9.62
0.9.56.2-LTS
0.9.60
0.9.60-rc1
0.9.58.2
0.9.58
0.9.58-rc1
0.9.56-LTS-release
0.9.56-LTS
0.9.56
0.9.56-rc1
0.9.54
0.9.54-rc2
0.9.54-rc1
0.9.52
0.9.38.12
0.9.50
0.9.50-rc1
0.9.48
0.9.46
0.9.46-rc1
0.9.44.10
0.9.44.8
0.9.44.6
0.9.38.10
0.9.44.4
0.9.38.8
0.9.44.2
0.9.44
0.9.44-rc1
0.9.38.4
0.9.42
0.9.42-rc2
0.9.38.2
0.9.42-rc1
disable-globalcfg
0.9.40
0.9.40-rc1
0.9.38
0.9.38-rc1
0.9.36
0.9.36-rc1
0.9.34
0.9.34-rc1
0.9.32
0.9.32-rc1
0.9.30
0.9.30-rc1
Labels
Clear labels   
LTS merge

   
LTS merge

   
bug

   
bug

   
converted-to-discussion

   
doc-todo

   
documentation

   
duplicate

   
enhancement

   
file-transfer

   
firecfg

   
firejail-in-firejail

   
firetools

   
graphics

   
help wanted

   
information_old

   
installation

   
invalid

   
modif

   
moved

   
needinfo

   
networking

   
notabug

   
notourbug

   
old-version

   
overlayfs

   
packaging

   
profile-request

   
pull-request

Mirrored from GitHub Pull Request

  
question

   
question_old

   
removal

   
runtime-permissions

   
sandbox-ipc

   
security

   
stale

   
wiki

   
wiki

   
wontfix

   
wordpress

   
workaround
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1147
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?