github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #168] firefox crash - apparmor or protocol entry in the profile #118

New issue

Closed

opened 2026-05-05 05:05:33 -06:00 by gitea-mirror · 7 comments

gitea-mirror commented

2026-05-05 05:05:33 -06:00

Owner

Originally created by @rahiel on GitHub (Nov 28, 2015).
Original GitHub issue: https://github.com/netblue30/firejail/issues/168

After some time firefox freezes (unresponsive) and leaves these error messages:

(firefox:1): GStreamer-WARNING **: External plugin loader failed. This most likely means that the plugin loader helper binary was not found or could not be run. You might need to set the GST_PLUGIN_SCANNER environment variable if your setup is unusual. This should normally not be required though.
libdc1394 error: Failed to initialize libdc1394

(firefox:1): GLib-GObject-WARNING **: cannot register existing type 'GdkDisplay'

(firefox:1): GLib-CRITICAL **: g_once_init_leave: assertion 'result != 0' failed

(firefox:1): GLib-GObject-CRITICAL **: g_type_register_static: assertion 'parent_type > 0' failed

(firefox:1): GLib-GObject-CRITICAL **: g_type_add_interface_static: assertion 'G_TYPE_IS_INSTANTIATABLE (instance_type)' failed

(firefox:1): GLib-CRITICAL **: g_once_init_leave: assertion 'result != 0' failed

This is on Ubuntu 15.10 with firejail 0.9.34. This does not occur on version 0.9.28. It also happens with firejail --private firefox.

Originally created by @rahiel on GitHub (Nov 28, 2015). Original GitHub issue: https://github.com/netblue30/firejail/issues/168 After some time firefox freezes (unresponsive) and leaves these error messages: ``` (firefox:1): GStreamer-WARNING **: External plugin loader failed. This most likely means that the plugin loader helper binary was not found or could not be run. You might need to set the GST_PLUGIN_SCANNER environment variable if your setup is unusual. This should normally not be required though. libdc1394 error: Failed to initialize libdc1394 (firefox:1): GLib-GObject-WARNING **: cannot register existing type 'GdkDisplay' (firefox:1): GLib-CRITICAL **: g_once_init_leave: assertion 'result != 0' failed (firefox:1): GLib-GObject-CRITICAL **: g_type_register_static: assertion 'parent_type > 0' failed (firefox:1): GLib-GObject-CRITICAL **: g_type_add_interface_static: assertion 'G_TYPE_IS_INSTANTIATABLE (instance_type)' failed (firefox:1): GLib-CRITICAL **: g_once_init_leave: assertion 'result != 0' failed ``` This is on Ubuntu 15.10 with firejail 0.9.34. This does not occur on version 0.9.28. It also happens with `firejail --private firefox`.

gitea-mirror

2026-05-05 05:05:33 -06:00

closed this issue
added the
bug
label

gitea-mirror commented

2026-05-05 05:05:40 -06:00

Author

Owner

@netblue30 commented on GitHub (Nov 29, 2015):

I've fixed this problem some time ago in the master branch. You need to replace "protocol unix,inet,inet6" with "protocol unix,inet,inet6,netlink" in /etc/firejail/firefox.profile. It has something to do with the video camera.

@netblue30 commented on GitHub (Nov 29, 2015): I've fixed this problem some time ago in the master branch. You need to replace "protocol unix,inet,inet6" with "protocol unix,inet,inet6,netlink" in /etc/firejail/firefox.profile. It has something to do with the video camera.

gitea-mirror commented

2026-05-05 05:05:43 -06:00

Author

Owner

@rahiel commented on GitHub (Nov 29, 2015):

Changing that line in the profile, I get the same crash. I also compiled
and installed firejail from master and get the same error messages.

On 29-11-15 14:06, netblue30 wrote:

aster branch. You need to replace "protocol unix,inet,inet6" with
"protocol unix,inet,inet6,netlink" in /etc/firejail/firefox.profile. It
has something to do with

@rahiel commented on GitHub (Nov 29, 2015): Changing that line in the profile, I get the same crash. I also compiled and installed firejail from master and get the same error messages. On 29-11-15 14:06, netblue30 wrote: > aster branch. You need to replace "protocol unix,inet,inet6" with > "protocol unix,inet,inet6,netlink" in /etc/firejail/firefox.profile. It > has something to do with

gitea-mirror commented

2026-05-05 05:05:47 -06:00

Author

Owner

@netblue30 commented on GitHub (Nov 29, 2015):

If you remove the protocol line from the profile file, do you still get the crash? Also, make sure you are not already running firefox when you start it in the sandbox.

@netblue30 commented on GitHub (Nov 29, 2015): If you remove the protocol line from the profile file, do you still get the crash? Also, make sure you are not already running firefox when you start it in the sandbox.

gitea-mirror commented

2026-05-05 05:05:51 -06:00

Author

Owner

@rahiel commented on GitHub (Nov 29, 2015):

It works now with the firefox profile in master. The problem was a conflict with apparmor, it gave this error:

org.gtk.vfs.MountTracker.listMountableInfo call failed: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: An AppArmor policy prevents this sender from sending this message to this recipient; type="method_call", sender=":1.739" (uid=1000 pid=17390 comm="/usr/lib/firefox/firefox ") interface="org.gtk.vfs.MountTracker" member="ListMountableInfo" error name="(unset)" requested_reply="0" destination=":1.6" (uid=1000 pid=1226 comm="/usr/lib/gvfs/gvfsd ") (g-dbus-error-quark, 9)
ATTENTION: default value of option force_s3tc_enable overridden by environment.
Can't find symbol 'glXCreateContextAttribsARB'.

Firefox works fine with either apparmor or firejail, but not both. I've disabled apparmor for now.

@rahiel commented on GitHub (Nov 29, 2015): It works now with the firefox profile in master. The problem was a conflict with apparmor, it gave this error: ``` org.gtk.vfs.MountTracker.listMountableInfo call failed: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: An AppArmor policy prevents this sender from sending this message to this recipient; type="method_call", sender=":1.739" (uid=1000 pid=17390 comm="/usr/lib/firefox/firefox ") interface="org.gtk.vfs.MountTracker" member="ListMountableInfo" error name="(unset)" requested_reply="0" destination=":1.6" (uid=1000 pid=1226 comm="/usr/lib/gvfs/gvfsd ") (g-dbus-error-quark, 9) ATTENTION: default value of option force_s3tc_enable overridden by environment. Can't find symbol 'glXCreateContextAttribsARB'. ``` Firefox works fine with either apparmor or firejail, but not both. I've disabled apparmor for now.

gitea-mirror commented

2026-05-05 05:05:55 -06:00

Author

Owner

@netblue30 commented on GitHub (Nov 29, 2015):

Question: if you put "protocol unix,inet,inet6" and disable apparmor, does it work?

@netblue30 commented on GitHub (Nov 29, 2015): Question: if you put "protocol unix,inet,inet6" and disable apparmor, does it work?

gitea-mirror commented

2026-05-05 05:05:58 -06:00

Author

Owner

@rahiel commented on GitHub (Nov 29, 2015):

Question: if you put "protocol unix,inet,inet6" and disable apparmor, does it work?

Yes it works.

@rahiel commented on GitHub (Nov 29, 2015): > Question: if you put "protocol unix,inet,inet6" and disable apparmor, does it work? Yes it works.

gitea-mirror commented

2026-05-05 05:06:00 -06:00

Author

Owner

@netblue30 commented on GitHub (Nov 29, 2015):

Thanks!

@netblue30 commented on GitHub (Nov 29, 2015): Thanks!

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#118

No description provided.

Rows
Columns