github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #2038] Just updating firejail on Fedora 28 #1375

New issue

Closed

opened 2026-05-05 07:58:42 -06:00 by gitea-mirror · 4 comments

gitea-mirror commented

2026-05-05 07:58:42 -06:00

Owner

Originally created by @derba on GitHub (Jul 13, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2038

I updated from Fedora 27 to 28 using Gnome Software. To avoid Firefox issues I pulled the latest firejail from git.

$ git pull
$ git clean -xdf
$ ./configure
$ make -j
$ sudo make install
$ sudo firecfg --clean
$ sudo firecfg
$ firefox
Reading profile /etc/firejail/firefox.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 13352, child pid 13353
Blacklist violations are logged to syslog

Firefox did not work. According to journalctl it crashed at chroot. But that is impossible, #1939 fixed that ages ago.

To my surprise I found /etc/firejail dir with rather old files. Well, I thought those files are in /usr/local/etc/firejail.

$ sudo rm -rf /etc/firejail
$ sudo make install
$ sudo firecfg
$ firefox
Error: Firejail configuration file /etc/firejail/firejail.config not found

No problem, just copy the profiles in the repo to /etc.

$ sudo mkdir /etc/firejail
$ sudo cp etc/* /etc/firejail/
$ firefox
Reading profile /etc/firejail/firefox.profile
Reading profile /etc/firejail/firefox-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Error: line 31 in /etc/firejail/firefox-common.profile is invalid

That happens to be nodbus line. I commented that out. And Firefox works.

Originally created by @derba on GitHub (Jul 13, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/2038 I updated from Fedora 27 to 28 using Gnome Software. To avoid Firefox issues I pulled the latest firejail from git. ``` $ git pull $ git clean -xdf $ ./configure $ make -j $ sudo make install $ sudo firecfg --clean $ sudo firecfg $ firefox Reading profile /etc/firejail/firefox.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-var-common.inc Parent pid 13352, child pid 13353 Blacklist violations are logged to syslog ``` Firefox did not work. According to journalctl it crashed at chroot. But that is impossible, #1939 fixed that ages ago. To my surprise I found /etc/firejail dir with rather old files. Well, I thought those files are in /usr/local/etc/firejail. ``` $ sudo rm -rf /etc/firejail $ sudo make install $ sudo firecfg $ firefox Error: Firejail configuration file /etc/firejail/firejail.config not found ``` No problem, just copy the profiles in the repo to /etc. ``` $ sudo mkdir /etc/firejail $ sudo cp etc/* /etc/firejail/ $ firefox Reading profile /etc/firejail/firefox.profile Reading profile /etc/firejail/firefox-common.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-var-common.inc Error: line 31 in /etc/firejail/firefox-common.profile is invalid ``` That happens to be `nodbus` line. I commented that out. And Firefox works.

gitea-mirror closed this issue

2026-05-05 07:58:43 -06:00

gitea-mirror commented

2026-05-05 07:58:48 -06:00

Author

Owner

@SkewedZeppelin commented on GitHub (Jul 15, 2018):

You probably still have a mix of files, you might want to

sudo make uninstall
sudo dnf remove firejail
sudo rm -rf /etc/firejail /run/firejail /usr/bin/{firejail,firemon,firecfg} /usr/lib/firejail

and then to reinstall, use the following instead of make install

./configure
make rpms
sudo dnf install firejail-0.9.55-1.x86_64.rpm
sudo firecfg

@SkewedZeppelin commented on GitHub (Jul 15, 2018): You probably still have a mix of files, you might want to ``` sudo make uninstall sudo dnf remove firejail sudo rm -rf /etc/firejail /run/firejail /usr/bin/{firejail,firemon,firecfg} /usr/lib/firejail ``` and then to reinstall, use the following instead of `make install` ``` ./configure make rpms sudo dnf install firejail-0.9.55-1.x86_64.rpm sudo firecfg ```

gitea-mirror commented

2026-05-05 07:58:50 -06:00

Author

Owner

@derba commented on GitHub (Jul 16, 2018):

Yes, I realized that I must have 2 firejail versions, as the nodbus issue could not occur otherwise. One firejail remained from an installed rpm.

$ ls -l `which firefox`
lrwxrwxrwx. 1 root root 17 Jun 21 09:43 /usr/local/bin/firefox -> /usr/bin/firejail

While the new firejail is at /usr/local/bin/firejail.

Thank you. I removed the old one. It was strange that firecfg --clean could not remove old symlinks.

@derba commented on GitHub (Jul 16, 2018): Yes, I realized that I must have 2 firejail versions, as the `nodbus` issue could not occur otherwise. One firejail remained from an installed rpm. ``` $ ls -l `which firefox` lrwxrwxrwx. 1 root root 17 Jun 21 09:43 /usr/local/bin/firefox -> /usr/bin/firejail ``` While the new firejail is at `/usr/local/bin/firejail`. Thank you. I removed the old one. It was strange that `firecfg --clean` could not remove old symlinks.

gitea-mirror commented

2026-05-05 07:58:52 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (Jul 16, 2018):

Thank you. I removed the old one. It was strange that firecfg --clean could not remove old symlinks.

I presume this might be because it was running the new firecfg on the symlinks created by the old firecfg. If you had run sudo /usr/bin/firecfg --clean, it might have had the desired effect? Maybe? I'm just guessing here...

@chiraag-nataraj commented on GitHub (Jul 16, 2018): > Thank you. I removed the old one. It was strange that firecfg --clean could not remove old symlinks. I presume this might be because it was running the _new_ `firecfg` on the symlinks created by the _old_ `firecfg`. If you had run `sudo /usr/bin/firecfg --clean`, it might have had the desired effect? Maybe? I'm just guessing here...

gitea-mirror commented

2026-05-05 07:58:56 -06:00

Author

Owner

@derba commented on GitHub (Jul 16, 2018):

That is my assumption, too. But I cannot try that, as I removed the files "my way".

@derba commented on GitHub (Jul 16, 2018): That is my assumption, too. But I cannot try that, as I removed the files "my way".

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1375

No description provided.

Rows
Columns