github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6

[GH-ISSUE #2214] LibreOffice won't start on Parrot 4.3 #1483

New issue
Closed
opened 2026-05-05 08:09:05 -06:00 by gitea-mirror · 14 comments
gitea-mirror commented 2026-05-05 08:09:05 -06:00
Owner
Copy link

Originally created by @maxpostal on GitHub (Oct 24, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2214

Hi,

I have faced with issue on Parrot 4.3:

$libreoffice %U
Reading profile /etc/firejail/libreoffice.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 18644, child pid 18645
Child process initialized in 84.41 ms
Final linking of kernel DynamicKernel failed.

Parent is shutting down, bye...

$firejail --apparmor libreoffice
Reading profile /etc/firejail/libreoffice.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 18747, child pid 18748
Child process initialized in 88.34 ms
Warning: an existing sandbox was detected. /usr/bin/libreoffice will run without any additional sandboxing features
Final linking of kernel DynamicKernel failed.

Parent is shutting down, bye...
Originally created by @maxpostal on GitHub (Oct 24, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/2214 Hi, I have faced with issue on Parrot 4.3: ``` $libreoffice %U Reading profile /etc/firejail/libreoffice.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-passwdmgr.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-var-common.inc Parent pid 18644, child pid 18645 Child process initialized in 84.41 ms Final linking of kernel DynamicKernel failed. Parent is shutting down, bye... ``` ``` $firejail --apparmor libreoffice Reading profile /etc/firejail/libreoffice.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-passwdmgr.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-var-common.inc Parent pid 18747, child pid 18748 Child process initialized in 88.34 ms Warning: an existing sandbox was detected. /usr/bin/libreoffice will run without any additional sandboxing features Final linking of kernel DynamicKernel failed. Parent is shutting down, bye... ```
gitea-mirror commented 2026-05-05 08:09:08 -06:00
Author
Owner
Copy link

@smitsohu commented on GitHub (Oct 28, 2018):

Can you please try if firejail --noprofile libreoffice works?

Somethings else to try would be firejail --tracelog libreoffice, and then check journalctl | grep blacklist if there is something related to libreoffice.

Thanks.

<!-- gh-comment-id:433705373 --> @smitsohu commented on GitHub (Oct 28, 2018): Can you please try if `firejail --noprofile libreoffice` works? Somethings else to try would be `firejail --tracelog libreoffice`, and then check `journalctl | grep blacklist` if there is something related to libreoffice. Thanks.
gitea-mirror commented 2026-05-05 08:09:09 -06:00
Author
Owner
Copy link

@SkewedZeppelin commented on GitHub (Oct 28, 2018):

@smitsohu iirc Parrot ships many modified profiles.

@Max1mCom can you also paste in /etc/firejail/libreoffice.profile too?

<!-- gh-comment-id:433721801 --> @SkewedZeppelin commented on GitHub (Oct 28, 2018): @smitsohu iirc Parrot ships many modified profiles. @Max1mCom can you also paste in `/etc/firejail/libreoffice.profile` too?
gitea-mirror commented 2026-05-05 08:09:09 -06:00
Author
Owner
Copy link

@maxpostal commented on GitHub (Oct 29, 2018):

Hello guys, thank you for your help.

Can you please try if firejail --noprofile libreoffice works?
Somethings else to try would be firejail --tracelog libreoffice

These commands are 'freezing' my system:
https://prnt.sc/lbn7r6

And command sudo journalctl | grep blacklist gives me the blank output. I mean, it doesn't output anything.

<!-- gh-comment-id:433794690 --> @maxpostal commented on GitHub (Oct 29, 2018): Hello guys, thank you for your help. > Can you please try if `firejail --noprofile libreoffice` works? > Somethings else to try would be firejail --tracelog libreoffice These commands are 'freezing' my system: https://prnt.sc/lbn7r6 And command `sudo journalctl | grep blacklist` gives me the blank output. I mean, it doesn't output anything.
gitea-mirror commented 2026-05-05 08:09:11 -06:00
Author
Owner
Copy link

@maxpostal commented on GitHub (Oct 29, 2018):

And LibreOffice doesn't work on Parrot right after installation.
I use ru-RU locale.

<!-- gh-comment-id:433794948 --> @maxpostal commented on GitHub (Oct 29, 2018): And LibreOffice doesn't work on Parrot right after installation. I use ru-RU locale.
gitea-mirror commented 2026-05-05 08:09:12 -06:00
Author
Owner
Copy link

@maxpostal commented on GitHub (Oct 29, 2018):

can you also paste in /etc/firejail/libreoffice.profile too?

┌─[✗]─[max@parrot]─[~]
└──╼ $sudo cat /etc/firejail/libreoffice.profile
# Firejail profile for libreoffice
# Description: Office productivity suite
# This file is overwritten after every install/update
# Persistent local customizations
include /etc/firejail/libreoffice.local
# Persistent global definitions
include /etc/firejail/globals.local

noblacklist ${HOME}/.java
noblacklist /usr/local/sbin
noblacklist ${HOME}/.config/libreoffice

# libreoffice uses java; if you don't care about java functionality,
# comment the next four lines
noblacklist ${PATH}/java
noblacklist /usr/lib/java
noblacklist /etc/java
noblacklist /usr/share/java

include /etc/firejail/disable-common.inc
include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-passwdmgr.inc
include /etc/firejail/disable-programs.inc

include /etc/firejail/whitelist-var-common.inc

# Ubuntu 18.04 uses its own apparmor profile
# uncomment the next line if you are not on Ubuntu
apparmor
caps.drop all
machine-id
netfilter
#nodbus
nodvd
nogroups
#nonewprivs - fix for Ubuntu 18.04/Debian 10
noroot
notv
#protocol unix,inet,inet6  - fix for Ubuntu 18.04/Debian 10
#seccomp  - fix for Ubuntu 18.04/Debian 10
shell none
#tracelog - problems reported by Ubuntu 18.04 apparmor profile in /var/log/syslog

private-dev
private-tmp

noexec ${HOME}
noexec /tmp

join-or-start libreoffice
┌─[max@parrot]─[~]
<!-- gh-comment-id:433795241 --> @maxpostal commented on GitHub (Oct 29, 2018): > can you also paste in `/etc/firejail/libreoffice.profile` too? ``` ┌─[✗]─[max@parrot]─[~] └──╼ $sudo cat /etc/firejail/libreoffice.profile # Firejail profile for libreoffice # Description: Office productivity suite # This file is overwritten after every install/update # Persistent local customizations include /etc/firejail/libreoffice.local # Persistent global definitions include /etc/firejail/globals.local noblacklist ${HOME}/.java noblacklist /usr/local/sbin noblacklist ${HOME}/.config/libreoffice # libreoffice uses java; if you don't care about java functionality, # comment the next four lines noblacklist ${PATH}/java noblacklist /usr/lib/java noblacklist /etc/java noblacklist /usr/share/java include /etc/firejail/disable-common.inc include /etc/firejail/disable-devel.inc include /etc/firejail/disable-passwdmgr.inc include /etc/firejail/disable-programs.inc include /etc/firejail/whitelist-var-common.inc # Ubuntu 18.04 uses its own apparmor profile # uncomment the next line if you are not on Ubuntu apparmor caps.drop all machine-id netfilter #nodbus nodvd nogroups #nonewprivs - fix for Ubuntu 18.04/Debian 10 noroot notv #protocol unix,inet,inet6 - fix for Ubuntu 18.04/Debian 10 #seccomp - fix for Ubuntu 18.04/Debian 10 shell none #tracelog - problems reported by Ubuntu 18.04 apparmor profile in /var/log/syslog private-dev private-tmp noexec ${HOME} noexec /tmp join-or-start libreoffice ┌─[max@parrot]─[~] ```
gitea-mirror commented 2026-05-05 08:09:13 -06:00
Author
Owner
Copy link

@smitsohu commented on GitHub (Oct 29, 2018):

Final linking of kernel DynamicKernel failed.

Maybe some problem with the DKMS.
Can you then please try another one?

If you have not done so yet, please run libreoffice once without firejail. To do this, give the absolute path on the commandline, e.g. /usr/bin/loffice. Afterwards try if you can start it with firejail as normal.

Should this not help, another command would be firejail --noprofile --allow-debuggers --writable-var --noblacklist=/sys/* libreoffice. If that one works, it would be awesome if you could juggle a bit with the options to find the minimal required set.

Thanks.

<!-- gh-comment-id:433892722 --> @smitsohu commented on GitHub (Oct 29, 2018): > Final linking of kernel DynamicKernel failed. Maybe some problem with the DKMS. Can you then please try another one? If you have not done so yet, please run libreoffice _once without_ firejail. To do this, give the absolute path on the commandline, e.g. /usr/bin/loffice. Afterwards try if you can start it with firejail as normal. Should this not help, another command would be `firejail --noprofile --allow-debuggers --writable-var --noblacklist=/sys/* libreoffice`. If that one works, it would be awesome if you could juggle a bit with the options to find the minimal required set. Thanks.
gitea-mirror commented 2026-05-05 08:09:13 -06:00
Author
Owner
Copy link

@maxpostal commented on GitHub (Oct 30, 2018):

Hello,

Thanks a lot.

$firejail --noprofile --allow-debuggers --writable-var --noblacklist=/sys/* libreoffice still freezes interface.

But $/usr/bin/loffice is working.
And after that $loffice is working too.
Libreoffice now is launching as usual.

<!-- gh-comment-id:434177610 --> @maxpostal commented on GitHub (Oct 30, 2018): Hello, Thanks a lot. `$firejail --noprofile --allow-debuggers --writable-var --noblacklist=/sys/* libreoffice` still freezes interface. But `$/usr/bin/loffice` is working. And after that `$loffice` is working too. Libreoffice now is launching as usual.
gitea-mirror commented 2026-05-05 08:09:15 -06:00
Author
Owner
Copy link

@Abdibasidissack commented on GitHub (Jan 8, 2019):

can you explain the steps you've taken to solve it

<!-- gh-comment-id:452220333 --> @Abdibasidissack commented on GitHub (Jan 8, 2019): can you explain the steps you've taken to solve it
gitea-mirror commented 2026-05-05 08:09:15 -06:00
Author
Owner
Copy link

@maxpostal commented on GitHub (Jan 8, 2019):

Hi,
I don't remember exactly.
Just try to run the following command from my previus message:
/usr/bin/loffice

And also try to update your system packages:
sudo apt update && sudo apt upgrade

It's quite the old issue, I think it should be fixed.

<!-- gh-comment-id:452268760 --> @maxpostal commented on GitHub (Jan 8, 2019): Hi, I don't remember exactly. Just try to run the following command from my previus message: `/usr/bin/loffice` And also try to update your system packages: `sudo apt update && sudo apt upgrade` It's quite the old issue, I think it should be fixed.
gitea-mirror commented 2026-05-05 08:09:16 -06:00
Author
Owner
Copy link

@bgagan911 commented on GitHub (Jan 20, 2019):

/usr/bin/loffice
Works!!!!

<!-- gh-comment-id:455849599 --> @bgagan911 commented on GitHub (Jan 20, 2019): `/usr/bin/loffice ` Works!!!!
gitea-mirror commented 2026-05-05 08:09:17 -06:00
Author
Owner
Copy link

@Abdibasidissack commented on GitHub (Jan 20, 2019):

Thank you.
It works.

On Sun, Jan 20, 2019, 12:12 PM bgagan911 <notifications@github.com wrote:

/usr/bin/loffice

Works!!!!

—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/netblue30/firejail/issues/2214#issuecomment-455849599,
or mute the thread
https://github.com/notifications/unsubscribe-auth/Aq6vVzBJKWlVH_YrW1B37r45JJA4O9cvks5vFDL-gaJpZM4X3yiB
.

<!-- gh-comment-id:455851785 --> @Abdibasidissack commented on GitHub (Jan 20, 2019): Thank you. It works. On Sun, Jan 20, 2019, 12:12 PM bgagan911 <notifications@github.com wrote: > /usr/bin/loffice > > Works!!!! > > — > You are receiving this because you commented. > Reply to this email directly, view it on GitHub > <https://github.com/netblue30/firejail/issues/2214#issuecomment-455849599>, > or mute the thread > <https://github.com/notifications/unsubscribe-auth/Aq6vVzBJKWlVH_YrW1B37r45JJA4O9cvks5vFDL-gaJpZM4X3yiB> > . >
gitea-mirror commented 2026-05-05 08:09:17 -06:00
Author
Owner
Copy link

@ghost commented on GitHub (May 12, 2019):

I can confirm the problem is still there in Parrot Security 4.6. /usr/bin/loffice did the trick. Thanks! 😙

<!-- gh-comment-id:491584861 --> @ghost commented on GitHub (May 12, 2019): I can confirm the problem is still there in Parrot Security 4.6. `/usr/bin/loffice` did the trick. Thanks! :kissing_smiling_eyes:
gitea-mirror commented 2026-05-05 08:09:18 -06:00
Author
Owner
Copy link

@ContactLeft commented on GitHub (May 22, 2019):

Has this been fixed?

Neither one of these workarounds work for me.

<!-- gh-comment-id:494652031 --> @ContactLeft commented on GitHub (May 22, 2019): Has this been fixed? Neither one of these workarounds work for me.
gitea-mirror commented 2026-05-05 08:09:19 -06:00
Author
Owner
Copy link

@mjell027 commented on GitHub (May 25, 2019):

As @smitsohu already said this worked for me:
If you have not done so yet, please run libreoffice once without firejail.
To do this, give the absolute path on the commandline, e.g. /usr/bin/loffice.

<!-- gh-comment-id:495928501 --> @mjell027 commented on GitHub (May 25, 2019): As @smitsohu already said this worked for me: If you have not done so yet, please run libreoffice once without firejail. To do this, give the absolute path on the commandline, e.g. /usr/bin/loffice.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
master
serialize_remounts_v2
landlock_v4
landlock
release-0.9.64
release-0.9.62
gitlab_ci
LTSbase
fred_ctests
docs
0.9.80
0.9.80-rc1
0.9.78
0.9.76
0.9.76-rc4
0.9.76-rc3
0.9.76-rc2
0.9.76-rc1
0.9.74
landlock-split
0.9.72
0.9.72rc1
0.9.70
0.9.68
0.9.68rc1
0.9.66
0.9.66rc1
0.9.64.4
0.9.64.2
0.9.64
0.9.64rc1
0.9.62.4
0.9.62.2
0.9.62
0.9.56.2-LTS
0.9.60
0.9.60-rc1
0.9.58.2
0.9.58
0.9.58-rc1
0.9.56-LTS-release
0.9.56-LTS
0.9.56
0.9.56-rc1
0.9.54
0.9.54-rc2
0.9.54-rc1
0.9.52
0.9.38.12
0.9.50
0.9.50-rc1
0.9.48
0.9.46
0.9.46-rc1
0.9.44.10
0.9.44.8
0.9.44.6
0.9.38.10
0.9.44.4
0.9.38.8
0.9.44.2
0.9.44
0.9.44-rc1
0.9.38.4
0.9.42
0.9.42-rc2
0.9.38.2
0.9.42-rc1
disable-globalcfg
0.9.40
0.9.40-rc1
0.9.38
0.9.38-rc1
0.9.36
0.9.36-rc1
0.9.34
0.9.34-rc1
0.9.32
0.9.32-rc1
0.9.30
0.9.30-rc1
Labels
Clear labels   
LTS merge

   
LTS merge

   
bug

   
bug

   
converted-to-discussion

   
doc-todo

   
documentation

   
duplicate

   
enhancement

   
file-transfer

   
firecfg

   
firejail-in-firejail

   
firetools

   
graphics

   
help wanted

   
information_old

   
installation

   
invalid

   
modif

   
moved

   
needinfo

   
networking

   
notabug

   
notourbug

   
old-version

   
overlayfs

   
packaging

   
profile-request

   
pull-request

Mirrored from GitHub Pull Request

  
question

   
question_old

   
removal

   
runtime-permissions

   
sandbox-ipc

   
security

   
stale

   
wiki

   
wiki

   
wontfix

   
wordpress

   
workaround
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1483
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?