mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #2703] Firefox is Working Only in Noprofile mode, is this normal? "New User" #1702
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#1702
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @VampireFox2 on GitHub (May 17, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2703
Hi,
This is my first time ever working with Firejail and I'm liking it so far. So I installed the firejail-apparmor_0.9.58.2_1_amd64.deb and firetools_0.9.58_1_amd64.deb files and went through "Section 1. Technology" and "Section 2. Usage and Configuration basic usage" in the guide.
I didn't use the pakages in the Ubuntu repositories because their a bit outdated:
It seems that Firefox is working fine when I open it from the Unity launcher because I can see it's running after running this command:
firejail --topif I run
firejail firefoxI get the following output and it doesn't open:Reading profile /etc/firejail/firefox.profile Reading profile /etc/firejail/firefox-common.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-var-common.inc Parent pid 8515, child pid 8516 Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. Warning: cleaning all supplementary groups Warning: cleaning all supplementary groups Warning: cleaning all supplementary groups Warning: cleaning all supplementary groups Post-exec seccomp protector enabled Seccomp list in: @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice, check list: @default-keep, prelist: adjtimex,clock_adjtime,clock_settime,settimeofday,modify_ldt,lookup_dcookie,perf_event_open,process_vm_writev,delete_module,finit_module,init_module,_sysctl,afs_syscall,create_module,get_kernel_syms,getpmsg,putpmsg,query_module,security,sysfs,tuxcall,uselib,ustat,vserver,ioperm,iopl,kexec_load,reboot,set_mempolicy,migrate_pages,move_pages,mbind,swapon,swapoff,acct,add_key,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount2,vhangup,vmsplice, Child process initialized in 89.75 ms Error: execute permission denied for /usr/local/bin/firefox Error: no suitable firefox executable foundHowever if I run
firejail --noprofile firefoxis does open.Is this normal? Please forgive me as I am a new user and new to using sandboxing apps in general. I just want to confirm that I have everything setup and working the way it's supposed to.
I have apparmor enabled and have these firefox profiles in enforcing mode.
I'm on Ubuntu 18.04.2 LTS
Apparmor support is also enabled in firejail.
Also I had a question regarding Firefox. Should I install all my addons before or after setting up Firejail? Thank you so much for you time and for creating an awesome application.
@rusty-snake commented on GitHub (May 17, 2019):
@VampireFox2 can you try
firejail --ignore=apparmor firefoxand pastfirejail --debug firefox.PS: With 3 ` you can do a codeblock with linebreaks inside.
You can do both. I would prefer always running firefox in firejail.
@VampireFox2 commented on GitHub (May 17, 2019):
So I ran
firejail --ignore=apparmor firefoxand got the same output as runningfirejail firefox.So towards the end of the output after running
firejail --debug firefoxthis is displayed:I guess it's having some troubles with Firefox.
@Vincent43 commented on GitHub (May 17, 2019):
Try
sudo aa-disable usr.bin.firefox.@VampireFox2 commented on GitHub (May 17, 2019):
Ok so after comparing these three commands with the previous outputs after disabling the Firefox profiles I get the same output for all of them. Weird... so maybe it's not apparmor. I have no idea what the issue is..
@VampireFox2 commented on GitHub (May 17, 2019):
Update: "My bad, I had to reboot. It works now".