@KOLANICH commented on GitHub (Jun 3, 2019): >Which version of Firefox? The latest one in Ubuntu repo. >Which version of firejail? The one built today from git.

gitea-mirror commented

2026-05-05 08:23:35 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (Jun 3, 2019):

Okay, but GTK+ and Qt don't like W^X. At all. There's a lot more to this than just the JIT compiler.

@chiraag-nataraj commented on GitHub (Jun 3, 2019): Okay, but GTK+ and Qt don't like W^X. At all. There's a lot more to this than just the JIT compiler.

gitea-mirror commented

2026-05-05 08:23:36 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (Jun 3, 2019):

It doesn't look like we enable W^X for Firefox in the profiles we distribute, so I'm confused as to why you opened this issue, to be honest. The fact that Firefox (and pretty much every graphical program) doesn't work with W^X is a problem to file in their bug trackers, not on here.

This would be more understandable if we mistakenly enabled W^X for Firefox or something, but we're not doing that.

@chiraag-nataraj commented on GitHub (Jun 3, 2019): It doesn't look like we enable W^X for Firefox in the profiles we distribute, so I'm confused as to why you opened this issue, to be honest. The fact that Firefox (and pretty much _every_ graphical program) doesn't work with W^X is a problem to file in _their_ bug trackers, not on here. This would be more understandable if we mistakenly enabled W^X for Firefox or something, but we're not doing that.

gitea-mirror commented

2026-05-05 08:23:37 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (Jun 3, 2019):

I'm going to go ahead and close this since there isn't much we can do about it from our end. Feel free to re-open if I misunderstood something.

@chiraag-nataraj commented on GitHub (Jun 3, 2019): I'm going to go ahead and close this since there isn't much we can do about it from our end. Feel free to re-open if I misunderstood something.

gitea-mirror commented

2026-05-05 08:23:38 -06:00

Author

Owner

@KOLANICH commented on GitHub (Jun 3, 2019):

The fact that Firefox (and pretty much every graphical program) doesn't work with W^X is a problem to file in their bug trackers, not on here.

Definitely. But we need to track compatibility issues on our side too. Maybe a special issue which head post is updated by a bot reading specially formatted comments in profiles?

Okay, but GTK+ and Qt don't like W^X.

Yeah, if it is a case, this is surely their bugs.

@KOLANICH commented on GitHub (Jun 3, 2019): >The fact that Firefox (and pretty much every graphical program) doesn't work with W^X is a problem to file in their bug trackers, not on here. Definitely. But we need to track compatibility issues on our side too. Maybe a special issue which head post is updated by a bot reading specially formatted comments in profiles? >Okay, but GTK+ and Qt don't like W^X. Yeah, if it is a case, this is surely their bugs.

gitea-mirror commented

2026-05-05 08:23:38 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (Jun 3, 2019):

This isn't a compatibility issue, though. There's literally nothing we can do from our end besides disabling the flag for that profile. File bugs upstream and see if they'll change things. I highly suspect they won't :/

@chiraag-nataraj commented on GitHub (Jun 3, 2019): This isn't a compatibility issue, though. There's literally nothing we can do from our end besides disabling the flag for that profile. File bugs upstream and see if they'll change things. I highly suspect they won't :/

gitea-mirror commented

2026-05-05 08:23:39 -06:00

Author

Owner

@Vincent43 commented on GitHub (Jun 3, 2019):

That article is quite dated so it's hard to figure what current status is. Also as already noted above support W^X in some part of app doesn't mean the whole running process under firejail will support it. Someone in comments stated that you have to build firefox with --disable-ion (is it still valid?) but the cost is quite high. There are also some jit related options in config you may try disabling.

@Vincent43 commented on GitHub (Jun 3, 2019): That article is quite dated so it's hard to figure what current status is. Also as already noted above support W^X in some part of app doesn't mean the whole running process under firejail will support it. [Someone in comments](https://jandemooij.nl/blog/2015/12/29/wx-jit-code-enabled-in-firefox/#comment-2432767666) stated that you have to build firefox with `--disable-ion` (is it still valid?) but the cost is quite high. There are also [some jit related options in config](https://en.wikibooks.org/wiki/Grsecurity/Application-specific_Settings#Firefox_(or_Iceweasel_in_Debian)) you may try disabling.

gitea-mirror commented

2026-05-05 08:23:40 -06:00

Author

Owner

@SkewedZeppelin commented on GitHub (Jun 3, 2019):

@Vincent43

(is it still valid?)

https://searchfox.org/mozilla-central/source/js/src/devtools/automation/variants/nojit
seems so, who knows if it actually works
iirc on some platforms like POWER it ships disabled, so it should I guess?

@SkewedZeppelin commented on GitHub (Jun 3, 2019): @Vincent43 > (is it still valid?) https://searchfox.org/mozilla-central/source/js/src/devtools/automation/variants/nojit seems so, who knows if it actually works iirc on some platforms like POWER it ships disabled, so it should I guess?

gitea-mirror commented

2026-05-05 08:23:41 -06:00

Author

Owner

@KOLANICH commented on GitHub (Jun 3, 2019):

https://bugzilla.mozilla.org/show_bug.cgi?id=1338207
https://bugzilla.mozilla.org/show_bug.cgi?id=1371877

@KOLANICH commented on GitHub (Jun 3, 2019): https://bugzilla.mozilla.org/show_bug.cgi?id=1338207 https://bugzilla.mozilla.org/show_bug.cgi?id=1371877

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1724

No description provided.

Rows
Columns