[GH-ISSUE #197] Chromium fails to open with latest git #138

Closed
opened 2026-05-05 05:08:56 -06:00 by gitea-mirror · 1 comment
Owner

Originally created by @pigmonkey on GitHub (Dec 19, 2015).
Original GitHub issue: https://github.com/netblue30/firejail/issues/197

After upgrading from 0.9.34 to latest git, Chromium no longer opens when using the default profile.

$ firejail --version
firejail version 0.9.36-rc2

$ firejail /usr/bin/chromium
Reading profile /etc/firejail/chromium.profile
Reading profile /etc/firejail/disable-mgmt.inc
Reading profile /etc/firejail/disable-secret.inc
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/whitelist-common.inc
Parent pid 7499, child pid 7500
***
*** Warning: cannot whitelist Downloads directory
***     Any file saved will be lost when the sandbox is closed.
***     Please create a proper Downloads directory for your application.
***
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Blacklist violations are logged to syslog
Child process initialized

After that, the jail just sits there and chromium doesn't open. The process seems to be there, but I don't get a window.

$ ps aux | grep -i chrom
root      7739  0.0  0.0   7572  1832 pts/0    S+   12:43   0:00 firejail /usr/bin/chromium
pigmonk+  7740  0.0  0.0   7572  1820 pts/0    S+   12:43   0:00 firejail /usr/bin/chromium
pigmonk+  7741  2.4  0.1 435048 26976 pts/0    S+   12:43   0:00 /usr/lib/chromium/chromium --ppapi-flash-path=/usr/lib/PepperFlash/libpepflashplayer.so --ppapi-flash-version=20.0.0.228

If I kill that jail and run it again without a profile, everything works fine.

firejail --noprofile /usr/bin/chromium                                                         
Parent pid 9799, child pid 9800
Child process initialized

If I comment out the tracelog line in /etc/firejail/chromium.profile, it also works fine. If I launch it with --noprofile --tracelog, it does not open. The problem seems to be specific to the new tracelog functionality. I'm on Arch, which has replaced syslog in favor of the systemd stuff.

Originally created by @pigmonkey on GitHub (Dec 19, 2015). Original GitHub issue: https://github.com/netblue30/firejail/issues/197 After upgrading from 0.9.34 to latest git, Chromium no longer opens when using the default profile. ``` $ firejail --version firejail version 0.9.36-rc2 $ firejail /usr/bin/chromium Reading profile /etc/firejail/chromium.profile Reading profile /etc/firejail/disable-mgmt.inc Reading profile /etc/firejail/disable-secret.inc Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/whitelist-common.inc Parent pid 7499, child pid 7500 *** *** Warning: cannot whitelist Downloads directory *** Any file saved will be lost when the sandbox is closed. *** Please create a proper Downloads directory for your application. *** Warning: /sbin directory link was not blacklisted Warning: /usr/sbin directory link was not blacklisted Blacklist violations are logged to syslog Child process initialized ``` After that, the jail just sits there and chromium doesn't open. The process seems to be there, but I don't get a window. ``` $ ps aux | grep -i chrom root 7739 0.0 0.0 7572 1832 pts/0 S+ 12:43 0:00 firejail /usr/bin/chromium pigmonk+ 7740 0.0 0.0 7572 1820 pts/0 S+ 12:43 0:00 firejail /usr/bin/chromium pigmonk+ 7741 2.4 0.1 435048 26976 pts/0 S+ 12:43 0:00 /usr/lib/chromium/chromium --ppapi-flash-path=/usr/lib/PepperFlash/libpepflashplayer.so --ppapi-flash-version=20.0.0.228 ``` If I kill that jail and run it again without a profile, everything works fine. ``` firejail --noprofile /usr/bin/chromium Parent pid 9799, child pid 9800 Child process initialized ``` If I comment out the `tracelog` line in `/etc/firejail/chromium.profile`, it also works fine. If I launch it with `--noprofile --tracelog`, it does not open. The problem seems to be specific to the new tracelog functionality. I'm on Arch, which has replaced syslog in favor of the systemd stuff.
Author
Owner

@netblue30 commented on GitHub (Dec 20, 2015):

Thank you for debugging it. I took out "tracelog" for now in the latest git. I'll try to fix it and bring it back into Chromium profile in the next release cycle.

<!-- gh-comment-id:166117880 --> @netblue30 commented on GitHub (Dec 20, 2015): Thank you for debugging it. I took out "tracelog" for now in the latest git. I'll try to fix it and bring it back into Chromium profile in the next release cycle.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#138
No description provided.