github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #2432] DBUS firejail. Solved but need an "expert" opinion #1615

New issue

Closed

opened 2026-05-05 08:16:23 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 08:16:23 -06:00

Owner

Originally created by @ghost on GitHub (Feb 20, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2432

Hi. I get this wanring when starting firefox with firejail:
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
I solved this by adding 'net enp0s3' in my profile and now I don't get the warning BUT now when i start firefox with firejail the terminal writes out:

Interface MAC IP Mask Status lo 127.0.0.1 255.0.0.0 UP eth0-9345 ac:tu:al:MAC:adr:ess 10.0.2.55 255.255.255.0 UP Default gateway 10.0.2.2

My question is if this is a security risk? I am trying to get rid of all error/warnings from applications that has the largest security risks.

And while I am asking about this I would like your input on the matter with another warning i get 4 times every time I launch firejail firefox:

Warning: cleaning all supplementary groups

This I solved by removing 'noroot' from the profile. And basically the same question here. Is this the way to go or is it a security risk?

I am running arch linux with hardened kernel.

Thank you for taking your time.

Originally created by @ghost on GitHub (Feb 20, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/2432 Hi. I get this wanring when starting firefox with firejail: Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. I solved this by adding 'net enp0s3' in my profile and now I don't get the warning BUT now when i start firefox with firejail the terminal writes out: `Interface MAC IP Mask Status lo 127.0.0.1 255.0.0.0 UP eth0-9345 ac:tu:al:MAC:adr:ess 10.0.2.55 255.255.255.0 UP Default gateway 10.0.2.2 ` My question is if this is a security risk? I am trying to get rid of all error/warnings from applications that has the largest security risks. And while I am asking about this I would like your input on the matter with another warning i get 4 times every time I launch firejail firefox: `Warning: cleaning all supplementary groups` This I solved by removing 'noroot' from the profile. And basically the same question here. Is this the way to go or is it a security risk? I am running arch linux with hardened kernel. Thank you for taking your time.

gitea-mirror

2026-05-05 08:16:23 -06:00

closed this issue
added the
question_old
label

gitea-mirror commented

2026-05-05 08:16:26 -06:00

Author

Owner

@smitsohu commented on GitHub (Feb 20, 2019):

When you add net enp0s3 to your profile, Firejail will give you some details about the newly configured network namespace. This is information about a security feature, no security risk.

Warning: cleaning all supplementary groups

This is no security risk either. When running with --noroot, Firejail tries to remove most groups but keep a few in the new user namespace. If this fails for whatever reason, all groups are removed with the only exception of your user group, the same as if you had provided the --nogroups option. And if this fails, Firejail dies. So the warning is only about functionality, not security.

@smitsohu commented on GitHub (Feb 20, 2019): When you add `net enp0s3` to your profile, Firejail will give you some details about the newly configured network namespace. This is information about a security feature, no security risk. > Warning: cleaning all supplementary groups This is no security risk either. When running with `--noroot`, Firejail tries to remove most groups but keep a few in the new user namespace. If this fails for whatever reason, _all_ groups are removed with the only exception of your user group, the same as if you had provided the `--nogroups` option. And if _this_ fails, Firejail dies. So the warning is only about functionality, not security.

gitea-mirror commented

2026-05-05 08:16:27 -06:00

Author

Owner

@ghost commented on GitHub (Feb 20, 2019):

Great!! Appriciete it!!

@ghost commented on GitHub (Feb 20, 2019): Great!! Appriciete it!!

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1615

No description provided.

Rows
Columns