[GH-ISSUE #1946] Firejail versions 0.9.54~rc1_1 & 0.9.54~rc2_1 are causing Mozilla Thunderbird to crash #1302

Closed
opened 2026-05-05 07:49:34 -06:00 by gitea-mirror · 18 comments
Owner

Originally created by @SuperSentient on GitHub (May 14, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1946

Theres a problem with Firejail versions 0.9.54rc1_1 & 0.9.54rc2_1. There causing Mozilla Thunderbird to crash. Thunderbird was working just fine before FJ versions 0.9.54rc1_1 & 0.9.54rc2_1 when I run Thunderbird without Firejail it works just fine. Please fix this.

Originally created by @SuperSentient on GitHub (May 14, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/1946 Theres a problem with Firejail versions 0.9.54~rc1_1 & 0.9.54~rc2_1. There causing Mozilla Thunderbird to crash. Thunderbird was working just fine before FJ versions 0.9.54~rc1_1 & 0.9.54~rc2_1 when I run Thunderbird without Firejail it works just fine. Please fix this.
gitea-mirror 2026-05-05 07:49:34 -06:00
Author
Owner

@netblue30 commented on GitHub (May 19, 2018):

I cannot reproduce it on Debian stable. What distribution are you using? Also, how do you start the sandbox?

<!-- gh-comment-id:390420201 --> @netblue30 commented on GitHub (May 19, 2018): I cannot reproduce it on Debian stable. What distribution are you using? Also, how do you start the sandbox?
Author
Owner

@SuperSentient commented on GitHub (May 19, 2018):

Linux Mint 17.2. I start it with the command firejail thunderbird from the icon settings.

<!-- gh-comment-id:390434190 --> @SuperSentient commented on GitHub (May 19, 2018): Linux Mint 17.2. I start it with the command firejail thunderbird from the icon settings.
Author
Owner

@netblue30 commented on GitHub (May 20, 2018):

I'll give it a try!

<!-- gh-comment-id:390479522 --> @netblue30 commented on GitHub (May 20, 2018): I'll give it a try!
Author
Owner

@chiraag-nataraj commented on GitHub (Jul 26, 2018):

Is this still an issue?

<!-- gh-comment-id:408052445 --> @chiraag-nataraj commented on GitHub (Jul 26, 2018): Is this still an issue?
Author
Owner

@SuperSentient commented on GitHub (Jul 28, 2018):

@ chiraag-nataraj
Yes its still an issue even with version 0.9.54.

<!-- gh-comment-id:408573722 --> @SuperSentient commented on GitHub (Jul 28, 2018): @ **chiraag-nataraj** Yes its still an issue even with version 0.9.54.
Author
Owner

@chiraag-nataraj commented on GitHub (Jul 28, 2018):

What happens if you use firejail --noprofile thunderbird?

<!-- gh-comment-id:408585569 --> @chiraag-nataraj commented on GitHub (Jul 28, 2018): What happens if you use `firejail --noprofile thunderbird`?
Author
Owner

@SuperSentient commented on GitHub (Aug 3, 2018):

@ chiraag-nataraj

Thanks thats seems to work. But isn't that the same as not using Firejail?

<!-- gh-comment-id:410136115 --> @SuperSentient commented on GitHub (Aug 3, 2018): @ **chiraag-nataraj** Thanks thats seems to work. But isn't that the same as not using Firejail?
Author
Owner

@chiraag-nataraj commented on GitHub (Aug 6, 2018):

@SuperSentient Yes. Now, can you go through, comment out all of the lines in the profile, and slowly uncomment them until you find what breaks the profile?

<!-- gh-comment-id:410696963 --> @chiraag-nataraj commented on GitHub (Aug 6, 2018): @SuperSentient Yes. Now, can you go through, comment out all of the lines in the profile, and slowly uncomment them until you find what breaks the profile?
Author
Owner

@SuperSentient commented on GitHub (Aug 12, 2018):

@chiraag-nataraj Thanks but I'm not a programmer I joined GitHub so that I can report bugs and possibly try out new software. Anyway heres the all the lines from the terminal when I run firejail --noprofile thunderbird : Parent pid 9162, child pid 9163
Child process initialized in 13.13 ms

(thunderbird:2): GLib-GObject-CRITICAL **: g_object_unref: assertion 'object->ref_count > 0' failed

(thunderbird:2): GLib-GObject-CRITICAL **: g_object_unref: assertion 'object->ref_count > 0' failed

I cant make sense out of it.

<!-- gh-comment-id:412311673 --> @SuperSentient commented on GitHub (Aug 12, 2018): @**chiraag-nataraj** Thanks but I'm not a programmer I joined GitHub so that I can report bugs and possibly try out new software. Anyway heres the all the lines from the terminal when I run **firejail --noprofile thunderbird** : Parent pid 9162, child pid 9163 Child process initialized in 13.13 ms (thunderbird:2): GLib-GObject-CRITICAL **: g_object_unref: assertion 'object->ref_count > 0' failed (thunderbird:2): GLib-GObject-CRITICAL **: g_object_unref: assertion 'object->ref_count > 0' failed I cant make sense out of it.
Author
Owner

@Fred-Barclay commented on GitHub (Aug 12, 2018):

G'day @SuperSentient
No worries about not being a programmer. The reason we request you comment out the lines is usually when we can't reproduce an error ourselves, so the only way to get it fixed is for us to ask you for a bit extra help. 😉 You don't have to do it, but then it's quite possible we won't be able to fix the bug.

It's really easy to do too -- all you have to do is add a # to the beginning of each line. Then remove a single #, save the file, and run firejail thunderbird. If it works, then remove the next # and continue. If thunderbird doesn't start, just add back the # and continue on to remove the next one.

Once you've tried removing 'em all, let us know which lines didn't work unless there was a # at the beginning and we can probably get this bug fixed quickly.

<!-- gh-comment-id:412311997 --> @Fred-Barclay commented on GitHub (Aug 12, 2018): G'day @SuperSentient No worries about not being a programmer. The reason we request you comment out the lines is usually when we can't reproduce an error ourselves, so the only way to get it fixed is for us to ask you for a bit extra help. :wink: You don't **have** to do it, but then it's quite possible we won't be able to fix the bug. It's really easy to do too -- all you have to do is add a `#` to the beginning of each line. Then remove a single #, save the file, and run `firejail thunderbird`. If it works, then remove the next `#` and continue. If thunderbird doesn't start, just add back the `#` and continue on to remove the next one. Once you've tried removing 'em all, let us know which lines didn't work unless there was a `#` at the beginning and we can probably get this bug fixed quickly.
Author
Owner

@SuperSentient commented on GitHub (Aug 12, 2018):

@ Fred-Barclay
What do you mean by #? Also I don't notice any problems with Thunderbird in Kubuntu 18.04 which I'm planning to replace my Linux Mint KDE 17.2 with latter this year.

<!-- gh-comment-id:412314664 --> @SuperSentient commented on GitHub (Aug 12, 2018): @ **Fred-Barclay** What do you mean by #? Also I don't notice any problems with Thunderbird in Kubuntu 18.04 which I'm planning to replace my Linux Mint KDE 17.2 with latter this year.
Author
Owner

@chiraag-nataraj commented on GitHub (Aug 12, 2018):

@SuperSentient:
No worries! By "comment out lines", what I mean (and what @Fred-Barclay is alluding to) is to open the profile (either in ~/.config/firejail/ or in /etc/firejail/) and put a # at the beginning of all of the lines. So instead of the line looking like this:

include /etc/firejail/firefox.profile

it would look like this:

# include /etc/firejail/firefox.profile

To "uncomment" is to remove the # at the beginning - that is, to reverse what you did above. So what we are requesting (since we aren't seeing this problem) is for you to comment all of the lines initially and then slowly go through and uncomment stuff until it fails. Does that make sense?

<!-- gh-comment-id:412349756 --> @chiraag-nataraj commented on GitHub (Aug 12, 2018): @SuperSentient: No worries! By "comment out lines", what I mean (and what @Fred-Barclay is alluding to) is to open the profile (either in `~/.config/firejail/` or in `/etc/firejail/`) and put a `#` at the beginning of all of the lines. So instead of the line looking like this: ``` include /etc/firejail/firefox.profile ``` it would look like this: ``` # include /etc/firejail/firefox.profile ``` To "uncomment" is to remove the `#` at the beginning - that is, to reverse what you did above. So what we are requesting (since we aren't seeing this problem) is for you to comment all of the lines initially and then slowly go through and uncomment stuff until it fails. Does that make sense?
Author
Owner

@chiraag-nataraj commented on GitHub (Aug 12, 2018):

Also, something to keep in mind is that the thunderbird profile includes the firefox profile, which means the issue could actually be something in the firefox profile rather than the thunderbird profile.

<!-- gh-comment-id:412349972 --> @chiraag-nataraj commented on GitHub (Aug 12, 2018): Also, something to keep in mind is that the `thunderbird` profile _includes_ the `firefox` profile, which means the issue could actually be something in the _firefox_ profile rather than the _thunderbird_ profile.
Author
Owner

@SuperSentient commented on GitHub (Aug 12, 2018):

So I should try to enter # include /etc/firejail/firefox.profile in the terminal?

<!-- gh-comment-id:412366649 --> @SuperSentient commented on GitHub (Aug 12, 2018): So I should try to enter **# include /etc/firejail/firefox.profile** in the terminal?
Author
Owner

@chiraag-nataraj commented on GitHub (Aug 12, 2018):

No.
Terminology:
profile: the file(s) read by firejail in order to sandbox the program. Files installed by firejail will be found in /etc/firejail/ or /usr/local/etc/firejail, while custom profiles that you develop should be placed in ~/.config/firejail. These files will usually end with .profile, although many common files have been refactored and end with .inc.
comment: to place a # sign at the beginning of the specified line. This should be done within the profile file.
uncomment: to remove the # you placed at the beginning of the line. Again, this should be done within the profile file.

Does that help?

<!-- gh-comment-id:412367519 --> @chiraag-nataraj commented on GitHub (Aug 12, 2018): No. Terminology: profile: the file(s) read by `firejail` in order to sandbox the program. Files installed by `firejail` will be found in `/etc/firejail/` or `/usr/local/etc/firejail`, while custom profiles that you develop should be placed in `~/.config/firejail`. These files will usually end with `.profile`, although many common files have been refactored and end with `.inc`. comment: to place a `#` sign at the beginning of the specified line. This should be done _within the profile file_. uncomment: to remove the `#` you placed at the beginning of the line. Again, this should be done _within the profile file_. Does that help?
Author
Owner

@Fred-Barclay commented on GitHub (Aug 12, 2018):

@SuperSentient
This might be the easiest way...
Please copy the following into the file /etc/firejail/thunderbird.profile (you'll need to edit it as root):

#include /etc/firejail/thunderbird.local
#include /etc/firejail/globals.local
#noblacklist ${HOME}/.cache/thunderbird
#noblacklist ${HOME}/.gnupg
#noblacklist ${HOME}/.thunderbird
#mkdir ${HOME}/.cache/thunderbird
#mkdir ${HOME}/.gnupg
#mkdir ${HOME}/.thunderbird
#whitelist ${HOME}/.cache/thunderbird
#whitelist ${HOME}/.gnupg
#whitelist ${HOME}/.thunderbird
#ignore private-tmp
#read-only ${HOME}/.config/mimeapps.list
#writable-run-user
#include /etc/firejail/firefox.profile

Save the file.
Then remove the # from the first line (so it will look like include /etc/firejail/thunderbird.local). Save the file. Run firejail thunderbird.
Does it work? If so, now remove the # from the next line (it will now look like #include /etc/firejail/globals.local). Save the file. Run firejail thunderbird.

Repeat this process until firejail thunderbird no longer works. Once that occurs, re-add the # to the beginning of the line, save the file, and move on the next line.
Once you're on the next line, remove the # from it. Save the file. Run firejail thunderbird.

Continue on until you've done all the lines. Then let us know which lines you had to re-add the # to for firejail thunderbird to work.

Hope this helps!
Fred

<!-- gh-comment-id:412380604 --> @Fred-Barclay commented on GitHub (Aug 12, 2018): @SuperSentient This might be the easiest way... Please copy the following into the file /etc/firejail/thunderbird.profile (you'll need to edit it as root): ``` #include /etc/firejail/thunderbird.local #include /etc/firejail/globals.local #noblacklist ${HOME}/.cache/thunderbird #noblacklist ${HOME}/.gnupg #noblacklist ${HOME}/.thunderbird #mkdir ${HOME}/.cache/thunderbird #mkdir ${HOME}/.gnupg #mkdir ${HOME}/.thunderbird #whitelist ${HOME}/.cache/thunderbird #whitelist ${HOME}/.gnupg #whitelist ${HOME}/.thunderbird #ignore private-tmp #read-only ${HOME}/.config/mimeapps.list #writable-run-user #include /etc/firejail/firefox.profile ``` Save the file. Then remove the `#` from the first line (so it will look like `include /etc/firejail/thunderbird.local`). Save the file. Run `firejail thunderbird`. Does it work? If so, now remove the `#` from the next line (it will now look like `#include /etc/firejail/globals.local`). Save the file. Run `firejail thunderbird`. Repeat this process until `firejail thunderbird` no longer works. Once that occurs, re-add the `#` to the beginning of the line, save the file, and move on the next line. Once you're on the next line, remove the `#` from it. Save the file. Run `firejail thunderbird`. Continue on until you've done all the lines. Then let us know which lines you had to re-add the `#` to for `firejail thunderbird` to work. Hope this helps! Fred
Author
Owner

@chiraag-nataraj commented on GitHub (Oct 3, 2018):

@SuperSentient Were you able to figure this out?

<!-- gh-comment-id:426511801 --> @chiraag-nataraj commented on GitHub (Oct 3, 2018): @SuperSentient Were you able to figure this out?
Author
Owner

@chiraag-nataraj commented on GitHub (Dec 9, 2018):

Closing due to no reply. @SuperSentient, feel free to re-open.

<!-- gh-comment-id:445542130 --> @chiraag-nataraj commented on GitHub (Dec 9, 2018): Closing due to no reply. @SuperSentient, feel free to re-open.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1302
No description provided.