[GH-ISSUE #2040] Cannot access profile file #1376

Closed
opened 2026-05-05 07:58:42 -06:00 by gitea-mirror · 15 comments
Owner

Originally created by @dmitryvakulenko on GitHub (Jul 15, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2040

I get this error message whet firejail try to read profile file in ~/.config/firejail. This is a full log

 % firejail --debug /opt/Telegram/Telegram
Autoselecting /usr/bin/zsh as shell
Building quoted command line: '/opt/Telegram/Telegram' 
Command name #Telegram#
Found Telegram profile in /home/n0dwis/.config/firejail directory
Reading profile /home/n0dwis/.config/firejail/Telegram.profile
Error: cannot access profile file

Profile file are exist and has correct permissions

 % ls -la /home/n0dwis/.config/firejail                 
total 24
drwxr-xr-x   2 n0dwis n0dwis 4096 июл 13 17:33 .
drwx------. 82 n0dwis n0dwis 4096 июл 13 18:25 ..
-rw-r--r--   1 n0dwis n0dwis  836 июл 13 17:32 slack.profile
-rw-r--r--   1 n0dwis n0dwis  763 июл 13 17:32 stride.profile
-rw-r--r--   1 n0dwis n0dwis  690 июл 13 17:32 Telegram.profile
-rw-r--r--   1 n0dwis n0dwis  653 июл 13 17:32 vivaldi.profile

Even more - this trouble happend only on my notebook not on PC! Firejail version (0.9.54), OS (Mint 19) and profile files are same. This began after I updated my Linux Mint 18.3 to 19.

How can I get more information about reasons of this trouble?

Originally created by @dmitryvakulenko on GitHub (Jul 15, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/2040 I get this error message whet firejail try to read profile file in ~/.config/firejail. This is a full log ```bash % firejail --debug /opt/Telegram/Telegram Autoselecting /usr/bin/zsh as shell Building quoted command line: '/opt/Telegram/Telegram' Command name #Telegram# Found Telegram profile in /home/n0dwis/.config/firejail directory Reading profile /home/n0dwis/.config/firejail/Telegram.profile Error: cannot access profile file ``` Profile file are exist and has correct permissions ```bash % ls -la /home/n0dwis/.config/firejail total 24 drwxr-xr-x 2 n0dwis n0dwis 4096 июл 13 17:33 . drwx------. 82 n0dwis n0dwis 4096 июл 13 18:25 .. -rw-r--r-- 1 n0dwis n0dwis 836 июл 13 17:32 slack.profile -rw-r--r-- 1 n0dwis n0dwis 763 июл 13 17:32 stride.profile -rw-r--r-- 1 n0dwis n0dwis 690 июл 13 17:32 Telegram.profile -rw-r--r-- 1 n0dwis n0dwis 653 июл 13 17:32 vivaldi.profile ``` Even more - this trouble happend only on my notebook not on PC! Firejail version (0.9.54), OS (Mint 19) and profile files are same. This began after I updated my Linux Mint 18.3 to 19. How can I get more information about reasons of this trouble?
gitea-mirror 2026-05-05 07:58:42 -06:00
Author
Owner

@chiraag-nataraj commented on GitHub (Jul 15, 2018):

Can you post (or attach) your Telegram.profile here? I suspect it has something to do with an include within your profile.

<!-- gh-comment-id:405091567 --> @chiraag-nataraj commented on GitHub (Jul 15, 2018): Can you post (or attach) your `Telegram.profile` here? I suspect it has something to do with an `include` within your profile.
Author
Owner

@dmitryvakulenko commented on GitHub (Jul 15, 2018):

This is it. But any one of profiles in .config/firejale show same behaviour.

Telegram profile

private ${HOME}/private/telegram

noblacklist ${HOME}/.local/share/TelegramDesktop
noblacklist ${HOME}/.config/mimeapps.list
noblacklist ${HOME}/.local/share/mime

include /etc/firejail/disable-mgmt.inc
include /etc/firejail/disable-secret.inc
include /etc/firejail/disable-common.inc
include /etc/firejail/disable-devel.inc

caps.drop all
seccomp
protocol unix,inet,inet6
noroot

whitelist ~/Downloads/Telegram Desktop
whitelist ${HOME}/.local/share/TelegramDesktop
whitelist ${HOME}/.config/mimeapps.list
whitelist ${HOME}/.local/share/mime
include /etc/firejail/whitelist-common.inc

#include /etc/firejail/firefox.profile
#include /etc/firejail/google-chrome.profile

<!-- gh-comment-id:405095529 --> @dmitryvakulenko commented on GitHub (Jul 15, 2018): This is it. But any one of profiles in .config/firejale show same behaviour. # Telegram profile private ${HOME}/private/telegram noblacklist ${HOME}/.local/share/TelegramDesktop noblacklist ${HOME}/.config/mimeapps.list noblacklist ${HOME}/.local/share/mime include /etc/firejail/disable-mgmt.inc include /etc/firejail/disable-secret.inc include /etc/firejail/disable-common.inc include /etc/firejail/disable-devel.inc caps.drop all seccomp protocol unix,inet,inet6 noroot whitelist ~/Downloads/Telegram Desktop whitelist ${HOME}/.local/share/TelegramDesktop whitelist ${HOME}/.config/mimeapps.list whitelist ${HOME}/.local/share/mime include /etc/firejail/whitelist-common.inc #include /etc/firejail/firefox.profile #include /etc/firejail/google-chrome.profile
Author
Owner

@dmitryvakulenko commented on GitHub (Jul 15, 2018):

I check my profile files - yes you right. Files disable-mgmt.inc and disable-secret.inc are absent in /etc/firejail.

<!-- gh-comment-id:405095913 --> @dmitryvakulenko commented on GitHub (Jul 15, 2018): I check my profile files - yes you right. Files **disable-mgmt.inc** and **disable-secret.inc** are absent in /etc/firejail.
Author
Owner

@chiraag-nataraj commented on GitHub (Jul 15, 2018):

There you go 🙂 They might be in /usr/local/etc/firejail if you compiled from the git version.

<!-- gh-comment-id:405095938 --> @chiraag-nataraj commented on GitHub (Jul 15, 2018): There you go :slightly_smiling_face: They might be in `/usr/local/etc/firejail` if you compiled from the `git` version.
Author
Owner

@dmitryvakulenko commented on GitHub (Jul 15, 2018):

No. I installed it from .deb file and the package not contain this files.

<!-- gh-comment-id:405096097 --> @dmitryvakulenko commented on GitHub (Jul 15, 2018): No. I installed it from .deb file and the package not contain this files.
Author
Owner

@chiraag-nataraj commented on GitHub (Jul 15, 2018):

Hmm, that's weird. Is this from the repositories? Which distro?

<!-- gh-comment-id:405096152 --> @chiraag-nataraj commented on GitHub (Jul 15, 2018): Hmm, that's weird. Is this from the repositories? Which distro?
Author
Owner

@dmitryvakulenko commented on GitHub (Jul 15, 2018):

I downloaded it here https://sourceforge.net/projects/firejail/files/firejail/firejail_0.9.54_1_amd64.deb/download

<!-- gh-comment-id:405096296 --> @dmitryvakulenko commented on GitHub (Jul 15, 2018): I downloaded it here https://sourceforge.net/projects/firejail/files/firejail/firejail_0.9.54_1_amd64.deb/download
Author
Owner

@chiraag-nataraj commented on GitHub (Jul 15, 2018):

Which distro are you using? Is firejail not in the repository?

<!-- gh-comment-id:405096589 --> @chiraag-nataraj commented on GitHub (Jul 15, 2018): Which distro are you using? Is `firejail` not in the repository?
Author
Owner

@dmitryvakulenko commented on GitHub (Jul 15, 2018):

I used Mint 19 (upgraded from 18.3) about week ago. Yes, firejail is in repository but version 0.9.52 and that package don't has this files too.
I think this files left on my PC from previous firejail installation from Mint 18.3.

<!-- gh-comment-id:405097360 --> @dmitryvakulenko commented on GitHub (Jul 15, 2018): I used Mint 19 (upgraded from 18.3) about week ago. Yes, firejail is in repository but version 0.9.52 and that package don't has this files too. I think this files left on my PC from previous firejail installation from Mint 18.3.
Author
Owner

@SkewedZeppelin commented on GitHub (Jul 15, 2018):

@dmitryvakulenko can you try the following

firejail --profile=/etc/firejail/telegram.profile /opt/Telegram/Telegram
<!-- gh-comment-id:405097584 --> @SkewedZeppelin commented on GitHub (Jul 15, 2018): @dmitryvakulenko can you try the following ``` firejail --profile=/etc/firejail/telegram.profile /opt/Telegram/Telegram ```
Author
Owner

@chiraag-nataraj commented on GitHub (Jul 15, 2018):

Oh. Right. disable-mgmt.inc and disable-secret.inc were deprecated a long time ago, so you can't use those anymore.

<!-- gh-comment-id:405097617 --> @chiraag-nataraj commented on GitHub (Jul 15, 2018): Oh. Right. `disable-mgmt.inc` and `disable-secret.inc` were deprecated a long time ago, so you can't use those anymore.
Author
Owner

@dmitryvakulenko commented on GitHub (Jul 15, 2018):

So I should just remove this files from my profiles, right?

<!-- gh-comment-id:405097698 --> @dmitryvakulenko commented on GitHub (Jul 15, 2018): So I should just remove this files from my profiles, right?
Author
Owner

@dmitryvakulenko commented on GitHub (Jul 15, 2018):

@SkewedZeppelin, this command works. Bug is in my profile file.

<!-- gh-comment-id:405097780 --> @dmitryvakulenko commented on GitHub (Jul 15, 2018): @SkewedZeppelin, this command works. Bug is in my profile file.
Author
Owner

@SkewedZeppelin commented on GitHub (Jul 15, 2018):

@dmitryvakulenko yes, you should remove/backup any profiles you have in .config/firejail that contain disable-mgmt or disable-secret as those were removed in 0.9.40 (?)

<!-- gh-comment-id:405097973 --> @SkewedZeppelin commented on GitHub (Jul 15, 2018): @dmitryvakulenko yes, you should remove/backup any profiles you have in .config/firejail that contain disable-mgmt or disable-secret as those were removed in 0.9.40 (?)
Author
Owner

@dmitryvakulenko commented on GitHub (Jul 15, 2018):

Thanks for help!!

<!-- gh-comment-id:405098054 --> @dmitryvakulenko commented on GitHub (Jul 15, 2018): Thanks for help!!
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1376
No description provided.