github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #2216] Warnings with firefox and firejail #1487

New issue

Closed

opened 2026-05-05 08:09:23 -06:00 by gitea-mirror · 5 comments

gitea-mirror commented

2026-05-05 08:09:23 -06:00

Owner

Originally created by @rebirth123 on GitHub (Oct 25, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2216

Using the latest Firefox from Software Manager on Linux Mint 19 Cinnamon. I've tried Firejail versions .52, .54 and .56. I know .52 (the one in the Software manager) has problems with the Firefox version available, but i'm not sure where to problem now lies. I have tried reinstalling etc.

FF does start up and is showing in both --list and --tree commands, but I'm guessing this isn't normal behaviour.

$ firejail firefox
Reading profile /etc/firejail/firefox.profile
Reading profile /etc/firejail/firefox-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 4748, child pid 4749
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Warning: cleaning all supplementary groups
Warning: cleaning all supplementary groups
Warning: cleaning all supplementary groups
Warning: cleaning all supplementary groups
Post-exec seccomp protector enabled
Seccomp list in: @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice, check list: @default-keep, prelist: adjtimex,clock_adjtime,clock_settime,settimeofday,modify_ldt,lookup_dcookie,perf_event_open,process_vm_writev,delete_module,finit_module,init_module,_sysctl,afs_syscall,create_module,get_kernel_syms,getpmsg,putpmsg,query_module,security,sysfs,tuxcall,uselib,ustat,vserver,ioperm,iopl,kexec_load,reboot,set_mempolicy,migrate_pages,move_pages,mbind,swapon,swapoff,acct,add_key,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount2,vhangup,vmsplice,
Child process initialized in 77.68 ms
Warning: an existing sandbox was detected. /usr/bin/firefox will run without any additional sandboxing features
Parent is shutting down, bye...

Originally created by @rebirth123 on GitHub (Oct 25, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/2216 Using the latest Firefox from Software Manager on Linux Mint 19 Cinnamon. I've tried Firejail versions .52, .54 and .56. I know .52 (the one in the Software manager) has problems with the Firefox version available, but i'm not sure where to problem now lies. I have tried reinstalling etc. FF does start up and is showing in both --list and --tree commands, but I'm guessing this isn't normal behaviour. > $ firejail firefox Reading profile /etc/firejail/firefox.profile Reading profile /etc/firejail/firefox-common.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-var-common.inc Parent pid 4748, child pid 4749 Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. Warning: cleaning all supplementary groups Warning: cleaning all supplementary groups Warning: cleaning all supplementary groups Warning: cleaning all supplementary groups Post-exec seccomp protector enabled Seccomp list in: @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice, check list: @default-keep, prelist: adjtimex,clock_adjtime,clock_settime,settimeofday,modify_ldt,lookup_dcookie,perf_event_open,process_vm_writev,delete_module,finit_module,init_module,_sysctl,afs_syscall,create_module,get_kernel_syms,getpmsg,putpmsg,query_module,security,sysfs,tuxcall,uselib,ustat,vserver,ioperm,iopl,kexec_load,reboot,set_mempolicy,migrate_pages,move_pages,mbind,swapon,swapoff,acct,add_key,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount2,vhangup,vmsplice, Child process initialized in 77.68 ms Warning: an existing sandbox was detected. /usr/bin/firefox will run without any additional sandboxing features Parent is shutting down, bye...

gitea-mirror closed this issue

2026-05-05 08:09:24 -06:00

gitea-mirror commented

2026-05-05 08:09:26 -06:00

Author

Owner

@SkewedZeppelin commented on GitHub (Oct 25, 2018):

It is probably because you are running firejail twice
run which firefox
if you get /usr/local/bin/firefox that means you already enabled firejail for it by default
meaning running firejail firefox is equivalent to firejail firejail /usr/bin/firefox

@SkewedZeppelin commented on GitHub (Oct 25, 2018): It is probably because you are running firejail twice run `which firefox` if you get `/usr/local/bin/firefox` that means you already enabled firejail for it by default meaning running `firejail firefox` is equivalent to `firejail firejail /usr/bin/firefox`

gitea-mirror commented

2026-05-05 08:09:27 -06:00

Author

Owner

@rebirth123 commented on GitHub (Oct 25, 2018):

Thanks, you're right. sudo firecfg --clean seems to have done the trick. I must have run firecfg at some point.

@rebirth123 commented on GitHub (Oct 25, 2018): Thanks, you're right. _sudo firecfg --clean_ seems to have done the trick. I must have run firecfg at some point.

gitea-mirror commented

2026-05-05 08:09:28 -06:00

Author

Owner

@Vincent43 commented on GitHub (Oct 25, 2018):

Use /usr/bin/firefox to start app without firejail. Use firefox to start app with firejail.

Alternatively remove /usr/local/bin/firefox symlink and don't run firecfg. After that:
Use firefox to start app without firejail. Use firejail firefox to start app with firejail.

@Vincent43 commented on GitHub (Oct 25, 2018): Use `/usr/bin/firefox` to start app without firejail. Use `firefox` to start app with firejail. Alternatively remove `/usr/local/bin/firefox` symlink and don't run `firecfg`. After that: Use `firefox` to start app without firejail. Use `firejail firefox` to start app with firejail.

gitea-mirror commented

2026-05-05 08:09:29 -06:00

Author

Owner

@rebirth123 commented on GitHub (Oct 25, 2018):

Caught me whilst editing. :) Thanks for the alternative method. The final line in the warnings didn't look like an instruction.

@rebirth123 commented on GitHub (Oct 25, 2018): Caught me whilst editing. :) Thanks for the alternative method. The final line in the warnings didn't look like an instruction.

gitea-mirror commented

2026-05-05 08:09:29 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (Oct 25, 2018):

Seems to be resolved :)

@chiraag-nataraj commented on GitHub (Oct 25, 2018): Seems to be resolved :)

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1487

No description provided.

Rows
Columns