github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #2653] Error when running `aa-enforce firejail-default` #1673

New issue

Closed

opened 2026-05-05 08:19:11 -06:00 by gitea-mirror · 7 comments

gitea-mirror commented

2026-05-05 08:19:11 -06:00

Owner

Originally created by @julien-tmp on GitHub (Apr 15, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2653

- firejail version: 0.9.58.2
 - Linux distribution: Linux Mint LMDE
 - Problem did no exist in December last year
 - firejail withthe `--noprofile` argument: Does not give a warning about networking

I have the error below when running aa-enforce firejail-default :

ERROR: Warning: unable to find a suitable fs in /proc/mounts, is it mounted?
Use --subdomainfs to override.

Why does this happen and what to do about it?

Originally created by @julien-tmp on GitHub (Apr 15, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/2653 ``` - firejail version: 0.9.58.2 - Linux distribution: Linux Mint LMDE - Problem did no exist in December last year - firejail withthe `--noprofile` argument: Does not give a warning about networking ``` I have the error below when running `aa-enforce firejail-default` : ``` ERROR: Warning: unable to find a suitable fs in /proc/mounts, is it mounted? Use --subdomainfs to override. ``` Why does this happen and what to do about it?

gitea-mirror

2026-05-05 08:19:11 -06:00

closed this issue
added the
question_old
label

gitea-mirror commented

2026-05-05 08:19:14 -06:00

Author

Owner

@Vincent43 commented on GitHub (Apr 15, 2019):

What sudo aa-status shows?

You may try sudo apparmor_parser -r /etc/apparmor.d/firejail-default which is the recommended command for enabling apparmor profile referred in our manpage.

@Vincent43 commented on GitHub (Apr 15, 2019): What `sudo aa-status` shows? You may try `sudo apparmor_parser -r /etc/apparmor.d/firejail-default` which is the recommended command for enabling apparmor profile referred in our [manpage](https://github.com/netblue30/firejail/blob/master/src/man/firejail.txt#L2439).

gitea-mirror commented

2026-05-05 08:19:16 -06:00

Author

Owner

@julien-tmp commented on GitHub (Apr 22, 2019):

Thank you for checking that @Vincent43
Here is the output:

$ sudo aa-status            
apparmor module is loaded.
apparmor filesystem is not mounted.

and

$ sudo apparmor_parser -r /etc/apparmor.d/firejail-default
Warning: unable to find a suitable fs in /proc/mounts, is it mounted?
Use --subdomainfs to override.

It's possible that I have to do that:
https://ubuntuforums.org/showthread.php?t=2164641&p=12741691#post12741691

I don't want to play with grub too much in the following days. I will go back to this after making a backup.

PS: My partitions look like this if it helps

sdc       8:32   0   500G  0 disk  
├─sdc1    8:33   0     2M  0 part  
├─sdc2    8:34   0   512M  0 part  
└─sdc3    8:35   0 599G  0 part  
  └─lvm 254:0    0 499G  0 crypt 
    ├─vg0-root
    │   254:1    0    30G  0 lvm   /
    ├─vg0-var
    │   254:2    0    40G  0 lvm   /tmp
    ├─vg0-swap
    │   254:3    0    20G  0 lvm   [SWAP]
    └─vg0-home
        254:4    0 386.4G  0 lvm   /home

@julien-tmp commented on GitHub (Apr 22, 2019): Thank you for checking that @Vincent43 Here is the output: ``` $ sudo aa-status apparmor module is loaded. apparmor filesystem is not mounted. ``` and ``` $ sudo apparmor_parser -r /etc/apparmor.d/firejail-default Warning: unable to find a suitable fs in /proc/mounts, is it mounted? Use --subdomainfs to override. ``` It's possible that I have to do that: https://ubuntuforums.org/showthread.php?t=2164641&p=12741691#post12741691 I don't want to play with grub too much in the following days. I will go back to this after making a backup. PS: My partitions look like this if it helps ``` sdc 8:32 0 500G 0 disk ├─sdc1 8:33 0 2M 0 part ├─sdc2 8:34 0 512M 0 part └─sdc3 8:35 0 599G 0 part └─lvm 254:0 0 499G 0 crypt ├─vg0-root │ 254:1 0 30G 0 lvm / ├─vg0-var │ 254:2 0 40G 0 lvm /tmp ├─vg0-swap │ 254:3 0 20G 0 lvm [SWAP] └─vg0-home 254:4 0 386.4G 0 lvm /home ```

gitea-mirror commented

2026-05-05 08:19:17 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (May 19, 2019):

@julien-tmp Did you ever revisit this?

@chiraag-nataraj commented on GitHub (May 19, 2019): @julien-tmp Did you ever revisit this?

gitea-mirror commented

2026-05-05 08:19:18 -06:00

Author

Owner

@julien-tmp commented on GitHub (May 20, 2019):

Not yet unfortunately. Pretty busy lately. I will try to do it in this month. Do you face the same issue @chiraag-nataraj ?

@julien-tmp commented on GitHub (May 20, 2019): Not yet unfortunately. Pretty busy lately. I will try to do it in this month. Do you face the same issue @chiraag-nataraj ?

gitea-mirror commented

2026-05-05 08:19:19 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (May 20, 2019):

Nope, the apparmor integration is working fine on my end.

@chiraag-nataraj commented on GitHub (May 20, 2019): Nope, the apparmor integration is working fine on my end.

gitea-mirror commented

2026-05-05 08:19:20 -06:00

Author

Owner

@Vincent43 commented on GitHub (May 20, 2019):

For some reason AppArmor isn't working on your system, this isn't firejail related.

@Vincent43 commented on GitHub (May 20, 2019): For some reason AppArmor isn't working on your system, this isn't firejail related.

gitea-mirror commented

2026-05-05 08:19:21 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (May 21, 2019):

Yeah, looking over your earlier errors, this definitely looks like a non-firejail issue. @julien-tmp, the error looks like something that gets thrown when your kernel doesn't support apparmor. You'll have to look into possibly upgrading your kernel and/or figuring out why apparmor support seems to be disabled in your kernel.

Either way, this isn't a firejail issue, so I'll go ahead and close it, but feel free to keep replying and I'll do the best I can to help you figure it out :)

@chiraag-nataraj commented on GitHub (May 21, 2019): Yeah, looking over your earlier errors, this definitely looks like a non-firejail issue. @julien-tmp, the error [looks like](https://www.linuxquestions.org/questions/linux-security-4/why-is-apparmor-throwing-that-error-4175434956/) something that gets thrown when your kernel doesn't support apparmor. You'll have to look into possibly upgrading your kernel and/or figuring out why apparmor support seems to be disabled in your kernel. Either way, this isn't a firejail issue, so I'll go ahead and close it, but feel free to keep replying and I'll do the best I can to help you figure it out :)

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1673

No description provided.

Rows
Columns

[GH-ISSUE #2653] Error when running aa-enforce firejail-default #1673

[GH-ISSUE #2653] Error when running `aa-enforce firejail-default` #1673