github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

"$@" #1765

New issue

Closed

opened 2026-05-05 08:26:17 -06:00 by gitea-mirror · 5 comments

gitea-mirror commented

2026-05-05 08:26:17 -06:00

Owner

Originally created by @qazip on GitHub (Jul 2, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2821

Running riot-desktop firejail makes it crash with the following message:

/usr/bin/riot-desktop: line 3: 8 Trace/breakpoint trap (core dumped) electron /usr/lib/riot/ "$@"

Thi started happening when both electron and riot-desktop got updated 3 or so days ago.

Originally created by @qazip on GitHub (Jul 2, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/2821 Running riot-desktop firejail makes it crash with the following message: > /usr/bin/riot-desktop: line 3: 8 Trace/breakpoint trap (core dumped) electron /usr/lib/riot/ "$@" Thi started happening when both electron and riot-desktop got updated 3 or so days ago.

gitea-mirror closed this issue

2026-05-05 08:26:18 -06:00

gitea-mirror commented

2026-05-05 08:26:21 -06:00

Author

Owner

@qazip commented on GitHub (Jul 2, 2019):

Commenting seccomp in electron.profile seems to fix this.

@qazip commented on GitHub (Jul 2, 2019): Commenting `seccomp` in electron.profile seems to fix this.

gitea-mirror commented

2026-05-05 08:26:22 -06:00

Author

Owner

@rusty-snake commented on GitHub (Jul 2, 2019):

@qazip can you look in your syslog what syscall is bloked. (sudo journalctl | grep syscall)

@rusty-snake commented on GitHub (Jul 2, 2019): @qazip can you look in your syslog what syscall is bloked. (`sudo journalctl | grep syscall`)

gitea-mirror commented

2026-05-05 08:26:23 -06:00

Author

Owner

@qazip commented on GitHub (Jul 2, 2019):

Jul 02 11:42:13 laptop audit[14849]: SECCOMP auid=1000 uid=1000 gid=1001 ses=1 pid=14849 comm="electron" exe="/usr/lib/electron/electron" sig=31 arch=c000003e syscall=161 compat=0 ip=0x7f3446fede3d code=0x0
Jul 02 11:42:13 herethere kernel: audit: type=1326 audit(1562064133.927:4000): auid=1000 uid=1000 gid=1001 ses=1 pid=14849 comm="electron" exe="/usr/lib/electron/electron" sig=31 arch=c000003e syscall=161 compat=0 ip=0x7f3446fede3d code=0x0
                                                   #0  0x00007f3446fede3d syscall (libc.so.6)

Does that help?

@qazip commented on GitHub (Jul 2, 2019): ``` Jul 02 11:42:13 laptop audit[14849]: SECCOMP auid=1000 uid=1000 gid=1001 ses=1 pid=14849 comm="electron" exe="/usr/lib/electron/electron" sig=31 arch=c000003e syscall=161 compat=0 ip=0x7f3446fede3d code=0x0 Jul 02 11:42:13 herethere kernel: audit: type=1326 audit(1562064133.927:4000): auid=1000 uid=1000 gid=1001 ses=1 pid=14849 comm="electron" exe="/usr/lib/electron/electron" sig=31 arch=c000003e syscall=161 compat=0 ip=0x7f3446fede3d code=0x0 #0 0x00007f3446fede3d syscall (libc.so.6) ``` Does that help?

gitea-mirror commented

2026-05-05 08:26:24 -06:00

Author

Owner

@rusty-snake commented on GitHub (Jul 2, 2019):

$ firejail --debug-syscalls | grep 161   # syscall=161 in your output
161	- chroot

With syscalls.txt I get the following seccomp.drop line. (default seccomp filter without chroot)

ignore seccomp
seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,ioprio_set,io_setup,io_submit,kcmp,keyctl,mincore,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,pivot_root,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice

Try adding this in riot-desktop.profile and uncomment seccomp in electron.profile.

@rusty-snake commented on GitHub (Jul 2, 2019): ``` $ firejail --debug-syscalls | grep 161 # syscall=161 in your output 161 - chroot ``` With [syscalls.txt](https://github.com/netblue30/firejail/blob/master/etc/templates/syscalls.txt) I get the following `seccomp.drop` line. (default seccomp filter without chroot) ``` ignore seccomp seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,ioprio_set,io_setup,io_submit,kcmp,keyctl,mincore,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,pivot_root,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice ``` Try adding this in riot-desktop.profile and uncomment seccomp in electron.profile.

gitea-mirror commented

2026-05-05 08:26:25 -06:00

Author

Owner

@qazip commented on GitHub (Jul 2, 2019):

Yes, adding those lines in riot-desktop.profile fixed the issue.

@qazip commented on GitHub (Jul 2, 2019): Yes, adding those lines in riot-desktop.profile fixed the issue.

gitea-mirror referenced this issue

2026-05-05 10:13:46 -06:00

[PR #1865] [CLOSED] Potential fixes for Firefox 60 #4100

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1765

No description provided.

Rows
Columns