github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #2118] Firejail - Apparmor problem with missing slash #1435

New issue

Closed

opened 2026-05-05 08:06:08 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 08:06:08 -06:00

Owner

Originally created by @wofwofwof on GitHub (Sep 21, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2118

Hello,

not sure whats the reason for this problem. I've created an apparmor profile for thunderbird and it runs fine without firejail.

In combination with firejail I get following messages:

Sep 21 10:43:49 test12 kernel: [377872.848619] audit: type=1400 audit(1537519429.838:168): apparmor="DENIED" operation="getattr" info="Failed name lookup - disconnected path" error=-13 profile="/usr/lib64/thunderbird/thunderbird" name="dev/dri/card0" pid=29762 comm="GLXVsyncThread" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0

In the apparmor profile I have following entry:

/dev/dri/** r,

For firejail I use an empty profile.
The interesting thing is the missing / for dev/dri/card0 not sure if this is the reason, still.

cheers

wof

Originally created by @wofwofwof on GitHub (Sep 21, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/2118 Hello, not sure whats the reason for this problem. I've created an apparmor profile for thunderbird and it runs fine without firejail. In combination with firejail I get following messages: `Sep 21 10:43:49 test12 kernel: [377872.848619] audit: type=1400 audit(1537519429.838:168): apparmor="DENIED" operation="getattr" info="Failed name lookup - disconnected path" error=-13 profile="/usr/lib64/thunderbird/thunderbird" name="dev/dri/card0" pid=29762 comm="GLXVsyncThread" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0` In the apparmor profile I have following entry: > /dev/dri/** r, For firejail I use an empty profile. The interesting thing is the missing _/_ for _dev/dri/card0_ not sure if this is the reason, still. cheers wof

gitea-mirror

2026-05-05 08:06:08 -06:00

closed this issue
added the
question_old
label

gitea-mirror commented

2026-05-05 08:06:12 -06:00

Author

Owner

@Vincent43 commented on GitHub (Sep 21, 2018):

You need to add flags=(attach_disconnected) to your thunderbird apparmor profile, see https://github.com/netblue30/firejail/blob/master/etc/firejail-default#L13 as an example. That being said using both standalone AppArmor confinement with firejail is bad idea as they will block each other as you can see. Choose one.

@Vincent43 commented on GitHub (Sep 21, 2018): You need to add `flags=(attach_disconnected)` to your thunderbird apparmor profile, see https://github.com/netblue30/firejail/blob/master/etc/firejail-default#L13 as an example. That being said using both standalone AppArmor confinement with firejail is bad idea as they will block each other as you can see. Choose one.

gitea-mirror commented

2026-05-05 08:06:13 -06:00

Author

Owner

@wofwofwof commented on GitHub (Sep 21, 2018):

Thanks a lot for the clarification.

cheers
wof

@wofwofwof commented on GitHub (Sep 21, 2018): Thanks a lot for the clarification. cheers wof

gitea-mirror referenced this issue

2026-05-05 10:11:13 -06:00

[PR #1435] [MERGED] Update firecfg.config and add a wireshark-* alias #3963

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1435

No description provided.

Rows
Columns