github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 22:01:33 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6

[GH-ISSUE #2300] Brave not saving settings #1533

New issue
Closed
opened 2026-05-05 08:11:38 -06:00 by gitea-mirror · 22 comments
gitea-mirror commented 2026-05-05 08:11:38 -06:00
Owner
Copy link

Originally created by @qazip on GitHub (Dec 18, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2300

Brave has now a new browser (https://github.com/brave/brave-browser) and the firejail profile seems to not work well with this version.

When opening brave using the default firejail profile, we get the message: "You are using an unsupported command-line flag: --no-sandbox. Stability and security will suffer".

Also, while using firejail, the brave browser is not saving settings. Any idea how I could fix this?

Originally created by @qazip on GitHub (Dec 18, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/2300 Brave has now a new browser (https://github.com/brave/brave-browser) and the firejail profile seems to not work well with this version. When opening brave using the default firejail profile, we get the message: "You are using an unsupported command-line flag: --no-sandbox. Stability and security will suffer". Also, while using firejail, the brave browser is not saving settings. Any idea how I could fix this?
gitea-mirror 2026-05-05 08:11:38 -06:00
gitea-mirror commented 2026-05-05 08:11:41 -06:00
Author
Owner
Copy link

@rusty-snake commented on GitHub (Dec 18, 2018):

Works it with firejail --no-profile brave-browser?

<!-- gh-comment-id:448256282 --> @rusty-snake commented on GitHub (Dec 18, 2018): Works it with `firejail --no-profile brave-browser`?
gitea-mirror commented 2026-05-05 08:11:42 -06:00
Author
Owner
Copy link

@qazip commented on GitHub (Dec 18, 2018):

firejail --noprofile brave seems to work..

<!-- gh-comment-id:448271750 --> @qazip commented on GitHub (Dec 18, 2018): `firejail --noprofile brave` seems to work..
gitea-mirror commented 2026-05-05 08:11:44 -06:00
Author
Owner
Copy link

@Fred-Barclay commented on GitHub (Dec 18, 2018):

Hi @qazip
Please try this:

firejail --profile=/etc/firejail/brave.profile --whitelist=${HOME}/.config/BraveSoftware brave

Also, what version of firejail and Linux distro do you use?
Thanks!
Fred

<!-- gh-comment-id:448296046 --> @Fred-Barclay commented on GitHub (Dec 18, 2018): Hi @qazip Please try this: ``` firejail --profile=/etc/firejail/brave.profile --whitelist=${HOME}/.config/BraveSoftware brave ``` Also, what version of firejail and Linux distro do you use? Thanks! Fred
gitea-mirror commented 2026-05-05 08:11:45 -06:00
Author
Owner
Copy link

@qazip commented on GitHub (Dec 18, 2018):

Hey @Fred-Barclay,

That doesn't seem to work. Settings are still not saved (and there's still that message in the browser).

firejail --version                                                                            
firejail version 0.9.56

Compile time support:
	- AppArmor support is disabled
	- AppImage support is enabled
	- chroot support is enabled
	- file and directory whitelisting support is enabled
	- file transfer support is enabled
	- networking support is enabled
	- overlayfs support is enabled
	- private-home support is enabled
	- seccomp-bpf support is enabled
	- user namespace support is enabled
	- X11 sandboxing support is enabled

Using antergos.

<!-- gh-comment-id:448357357 --> @qazip commented on GitHub (Dec 18, 2018): Hey @Fred-Barclay, That doesn't seem to work. Settings are still not saved (and there's still that message in the browser). ``` firejail --version firejail version 0.9.56 Compile time support: - AppArmor support is disabled - AppImage support is enabled - chroot support is enabled - file and directory whitelisting support is enabled - file transfer support is enabled - networking support is enabled - overlayfs support is enabled - private-home support is enabled - seccomp-bpf support is enabled - user namespace support is enabled - X11 sandboxing support is enabled ``` Using antergos.
gitea-mirror commented 2026-05-05 08:11:45 -06:00
Author
Owner
Copy link

@SkewedZeppelin commented on GitHub (Dec 18, 2018):

@qazip please try the following:

firejail --name=brave --private --profile=/etc/firejail/brave.profile brave

firejail --join=brave bash
$ tree # paste the output of this

that should show what the new paths are

<!-- gh-comment-id:448358513 --> @SkewedZeppelin commented on GitHub (Dec 18, 2018): @qazip please try the following: ``` firejail --name=brave --private --profile=/etc/firejail/brave.profile brave firejail --join=brave bash $ tree # paste the output of this ``` that should show what the new paths are
gitea-mirror commented 2026-05-05 08:11:46 -06:00
Author
Owner
Copy link

@qazip commented on GitHub (Dec 19, 2018):

@SkewedZeppelin, first command doesn't save settings. Second command just outputs this:

Error: cannot find sandbox brave

<!-- gh-comment-id:448508197 --> @qazip commented on GitHub (Dec 19, 2018): @SkewedZeppelin, first command doesn't save settings. Second command just outputs this: `Error: cannot find sandbox brave`
gitea-mirror commented 2026-05-05 08:11:47 -06:00
Author
Owner
Copy link

@rusty-snake commented on GitHub (Dec 19, 2018):

@qazip Did you execute the second command before the first one ended?

<!-- gh-comment-id:448570784 --> @rusty-snake commented on GitHub (Dec 19, 2018): @qazip Did you execute the second command before the first one ended?
gitea-mirror commented 2026-05-05 08:11:47 -06:00
Author
Owner
Copy link

@qazip commented on GitHub (Dec 19, 2018):

I did it both ways. Separetely, I get the error I mentioned. Doing it while the previous command is running gives:

Switching to pid 17376, the first child process inside the sandbox

<!-- gh-comment-id:448572835 --> @qazip commented on GitHub (Dec 19, 2018): I did it both ways. Separetely, I get the error I mentioned. Doing it while the previous command is running gives: `Switching to pid 17376, the first child process inside the sandbox`
gitea-mirror commented 2026-05-05 08:11:48 -06:00
Author
Owner
Copy link

@rusty-snake commented on GitHub (Dec 19, 2018):

When you see this output, you are in a shell in the sandbox, type tree and copy the output to here.
Example:

Switching to pid 7144, the first child process inside the sandbox
Child process initialized in 12.29 ms
[USER@host ~]$ tree
.
..
.config
[...]
5 directories, 2 files
<!-- gh-comment-id:448577673 --> @rusty-snake commented on GitHub (Dec 19, 2018): When you see this output, you are in a shell in the sandbox, type `tree` and copy the output to here. Example: ``` Switching to pid 7144, the first child process inside the sandbox Child process initialized in 12.29 ms [USER@host ~]$ tree . .. .config [...] 5 directories, 2 files ```
gitea-mirror commented 2026-05-05 08:11:49 -06:00
Author
Owner
Copy link

@qazip commented on GitHub (Dec 19, 2018):

After installing tree and doing that:

.

0 directories, 0 files
<!-- gh-comment-id:448578775 --> @qazip commented on GitHub (Dec 19, 2018): After installing tree and doing that: ``` . 0 directories, 0 files ```
gitea-mirror commented 2026-05-05 08:11:50 -06:00
Author
Owner
Copy link

@rusty-snake commented on GitHub (Dec 19, 2018):

But brave was still running? With this command firejail --name=brave --private --profile=/etc/firejail/brave.profile brave.

<!-- gh-comment-id:448607093 --> @rusty-snake commented on GitHub (Dec 19, 2018): But brave was still running? With this command `firejail --name=brave --private --profile=/etc/firejail/brave.profile brave`.
gitea-mirror commented 2026-05-05 08:11:51 -06:00
Author
Owner
Copy link

@qazip commented on GitHub (Dec 19, 2018):

Yes, brave was still running..

<!-- gh-comment-id:448608477 --> @qazip commented on GitHub (Dec 19, 2018): Yes, brave was still running..
gitea-mirror commented 2026-05-05 08:11:51 -06:00
Author
Owner
Copy link

@SkewedZeppelin commented on GitHub (Dec 19, 2018):

@qazip apologies, can you do tree -lha to show all the dotfiles

<!-- gh-comment-id:448739822 --> @SkewedZeppelin commented on GitHub (Dec 19, 2018): @qazip apologies, can you do `tree -lha` to show all the dotfiles
gitea-mirror commented 2026-05-05 08:11:52 -06:00
Author
Owner
Copy link

@rusty-snake commented on GitHub (Dec 19, 2018):

@qazip general: You can hide it with creating a plain/text-file and use the "Attach files by dragging & dropping, selecting them, or pasting from the clipboard." field.

<!-- gh-comment-id:448743613 --> @rusty-snake commented on GitHub (Dec 19, 2018): @qazip general: You can hide it with creating a plain/text-file and use the "Attach files by dragging & dropping, selecting them, or pasting from the clipboard." field.
gitea-mirror commented 2026-05-05 08:11:53 -06:00
Author
Owner
Copy link

@qazip commented on GitHub (Dec 19, 2018):

Sorry about that @rusty-snake, I thought I could hide it behind a tag somehow. I've deleted the comment. Please see attachment.

brave_firejail.txt

<!-- gh-comment-id:448744498 --> @qazip commented on GitHub (Dec 19, 2018): Sorry about that @rusty-snake, I thought I could hide it behind a tag somehow. I've deleted the comment. Please see attachment. [brave_firejail.txt](https://github.com/netblue30/firejail/files/2696492/brave_firejail.txt)
gitea-mirror commented 2026-05-05 08:11:53 -06:00
Author
Owner
Copy link

@SkewedZeppelin commented on GitHub (Dec 19, 2018):

Hah @Fred-Barclay already fixed this issue a month ago. It just isn't in 0.9.56. See a41b2019e9

The command above probably didn't work for you because the directory didn't exist, so it still got deleted.

And GitHub does have spoiler support, see https://github.com/dear-github/dear-github/issues/166#issuecomment-236342209

<!-- gh-comment-id:448748193 --> @SkewedZeppelin commented on GitHub (Dec 19, 2018): Hah @Fred-Barclay already fixed this issue a month ago. It just isn't in 0.9.56. See a41b2019e9fa4e86bc3083fecc50ae015235065a The command above probably didn't work for you because the directory didn't exist, so it still got deleted. And GitHub does have spoiler support, see https://github.com/dear-github/dear-github/issues/166#issuecomment-236342209
gitea-mirror commented 2026-05-05 08:11:54 -06:00
Author
Owner
Copy link

@qazip commented on GitHub (Dec 20, 2018):

Ah, ya, running brave once without firejail so the folder BraveSoftware gets created and then doing:

firejail --profile=/etc/firejail/brave.profile --whitelist=${HOME}/.config/BraveSoftware brave

does fix the issue. I am sorry I didn't notice sooner that BraveSoftware was not created, my bad. Hopefully the new version gets released soon.. Thank you guys.

<!-- gh-comment-id:448930378 --> @qazip commented on GitHub (Dec 20, 2018): Ah, ya, running brave once without firejail so the folder BraveSoftware gets created and then doing: `firejail --profile=/etc/firejail/brave.profile --whitelist=${HOME}/.config/BraveSoftware brave` does fix the issue. I am sorry I didn't notice sooner that BraveSoftware was not created, my bad. Hopefully the new version gets released soon.. Thank you guys.
gitea-mirror commented 2026-05-05 08:11:54 -06:00
Author
Owner
Copy link

@Fred-Barclay commented on GitHub (Dec 25, 2018):

@SkewedZeppelin I've added the changes to /etc-fixes/0.9.56. Should we also push to the LTSbase branch?

<!-- gh-comment-id:449867136 --> @Fred-Barclay commented on GitHub (Dec 25, 2018): @SkewedZeppelin I've added the changes to /etc-fixes/0.9.56. Should we also push to the LTSbase branch?
gitea-mirror commented 2026-05-05 08:11:55 -06:00
Author
Owner
Copy link

@SkewedZeppelin commented on GitHub (Dec 25, 2018):

@startx2017 do you have any guidelines for when we should push to LTSbase?

<!-- gh-comment-id:449867226 --> @SkewedZeppelin commented on GitHub (Dec 25, 2018): @startx2017 do you have any guidelines for when we should push to LTSbase?
gitea-mirror commented 2026-05-05 08:11:55 -06:00
Author
Owner
Copy link

@Vincent43 commented on GitHub (Dec 26, 2018):

Is there a distro/project which uses our LTS?

<!-- gh-comment-id:449957906 --> @Vincent43 commented on GitHub (Dec 26, 2018): Is there a distro/project which uses our LTS?
gitea-mirror commented 2026-05-05 08:11:55 -06:00
Author
Owner
Copy link

@Fred-Barclay commented on GitHub (Dec 27, 2018):

@Vincent43 I keep seeing people on Mint running 0.9.56LTS.

Not entirely sure where it's coming from (the version in the repos is 0.9.38 for Mint 18.x and 0.9.52 for Mint 19.x).

<!-- gh-comment-id:450062197 --> @Fred-Barclay commented on GitHub (Dec 27, 2018): @Vincent43 I keep seeing people on Mint running 0.9.56LTS. Not entirely sure where it's coming from (the version in the repos is 0.9.38 for Mint 18.x and 0.9.52 for Mint 19.x).
gitea-mirror commented 2026-05-05 08:11:56 -06:00
Author
Owner
Copy link

@Vincent43 commented on GitHub (Dec 29, 2018):

It seems that users are getting it on their own from https://sourceforge.net/projects/firejail/files/LTS/

<!-- gh-comment-id:450446364 --> @Vincent43 commented on GitHub (Dec 29, 2018): It seems that users are getting it on their own from https://sourceforge.net/projects/firejail/files/LTS/
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
master
serialize_remounts_v2
landlock_v4
landlock
release-0.9.64
release-0.9.62
gitlab_ci
LTSbase
fred_ctests
docs
0.9.80
0.9.80-rc1
0.9.78
0.9.76
0.9.76-rc4
0.9.76-rc3
0.9.76-rc2
0.9.76-rc1
0.9.74
landlock-split
0.9.72
0.9.72rc1
0.9.70
0.9.68
0.9.68rc1
0.9.66
0.9.66rc1
0.9.64.4
0.9.64.2
0.9.64
0.9.64rc1
0.9.62.4
0.9.62.2
0.9.62
0.9.56.2-LTS
0.9.60
0.9.60-rc1
0.9.58.2
0.9.58
0.9.58-rc1
0.9.56-LTS-release
0.9.56-LTS
0.9.56
0.9.56-rc1
0.9.54
0.9.54-rc2
0.9.54-rc1
0.9.52
0.9.38.12
0.9.50
0.9.50-rc1
0.9.48
0.9.46
0.9.46-rc1
0.9.44.10
0.9.44.8
0.9.44.6
0.9.38.10
0.9.44.4
0.9.38.8
0.9.44.2
0.9.44
0.9.44-rc1
0.9.38.4
0.9.42
0.9.42-rc2
0.9.38.2
0.9.42-rc1
disable-globalcfg
0.9.40
0.9.40-rc1
0.9.38
0.9.38-rc1
0.9.36
0.9.36-rc1
0.9.34
0.9.34-rc1
0.9.32
0.9.32-rc1
0.9.30
0.9.30-rc1
Labels
Clear labels   
LTS merge

   
LTS merge

   
bug

   
bug

   
converted-to-discussion

   
doc-todo

   
documentation

   
duplicate

   
enhancement

   
file-transfer

   
firecfg

   
firejail-in-firejail

   
firetools

   
graphics

   
help wanted

   
information_old

   
installation

   
invalid

   
modif

   
moved

   
needinfo

   
networking

   
notabug

   
notourbug

   
old-version

   
overlayfs

   
packaging

   
profile-request

   
pull-request

Mirrored from GitHub Pull Request

  
question

   
question_old

   
removal

   
runtime-permissions

   
sandbox-ipc

   
security

   
stale

   
wiki

   
wiki

   
wontfix

   
wordpress

   
workaround
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1533
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?