mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #2866] new version of Slack Desktop (4.0) not working #1791
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#1791
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @daks on GitHub (Jul 22, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2866
Hello,
this morning, slack application can't run on firejail, while it was working two days ago. It could be because I upgraded some packages on my Debian Stretch. Slack is version 4.0.0 coming from their repository.
Firejail and firejail-profiles are version 0.9.58.2-2.
When running slack in firejail this is the output
and it gets stuck there.
It runs well without firejail.
I copied the profile from github but no change.
Thanks for this nice tool, and for any help in solving this problem.
@rusty-snake commented on GitHub (Jul 22, 2019):
@daks slack use electron, right? Related to #2854 and #2821 try adding the following to
slack.local.@daks commented on GitHub (Jul 22, 2019):
Thanks for this quick answer but the problem is still present with this fix
@rusty-snake commented on GitHub (Jul 22, 2019):
I assume that
firejail --noprofile slackworks.Then undo the changes in slack.local and try the following, if it works try to figure out what needs to be ignored.
firejail --ignore=private-bin --ignore=private-etc --ignore=private-tmp --ignore=seccomp --ignore=nogroups --ignore=nonewprivs --ignore=noroot slack@daks commented on GitHub (Jul 22, 2019):
not working...
@daks commented on GitHub (Jul 22, 2019):
I have no real hurry to make it run without firejail, I'm using the web UI in the meantime, I prefer to wait to have a working firejail profile to sandbox it :)
@rusty-snake commented on GitHub (Jul 22, 2019):
Now its interesting, looks like a loop.
sudo rm /usr/local/bin/slack(if you have a firecfg/firejail symlink)command -v slackcat $(command -v slack)// if it is a shell scriptEDIT:
Do you use firejail as shell? Or firejailing your terminal? (If unsure
firejail echo 'Hello World'should showReading profile /etc/firejail/default.profile)@daks commented on GitHub (Jul 22, 2019):
I don't think I firejail my shell (fish) or my terminal (urxtc) but
and
/usr/bin/slackis not a text file.@daks commented on GitHub (Jul 22, 2019):
it seems that my firefox is firejailed and... ssh?
@rusty-snake commented on GitHub (Jul 22, 2019):
try removing
name slackfrom slack.profile and addjoin-or-start slack@daks commented on GitHub (Jul 22, 2019):
still the same
@rusty-snake commented on GitHub (Jul 22, 2019):
I don't have more ideas, lets wait if someone else have an idea.
@FOSSONLY commented on GitHub (Jul 22, 2019):
I would suggest to replace fish with dash or bash, to solve that problem. The fish shell is experimental and non-standard (not posix compatible with some weird behavior), and there are other threads related to firejail, where could be solved by dropping fish.
@daks commented on GitHub (Jul 23, 2019):
In fact I'm using fish.
I launched bash to execute slack in firejail and I have the same problem.
I'm not sure it has any influence.
@FOSSONLY commented on GitHub (Jul 23, 2019):
Launched in which way? Would chsh be used to change the standard login shell? After that step you need to relogin/restart. This is important.
@daks commented on GitHub (Jul 24, 2019):
After chsh and restarting my X session, same problem.
@rusty-snake commented on GitHub (Jul 24, 2019):
https://slack.engineering/rebuilding-slack-on-the-desktop-308d6fe94ae4
@j1r1k commented on GitHub (Jul 25, 2019):
Seems to be working after adding
ignore private-etctoslack.local. Soprivate-etcinslack.profileneeds to be updated (but I don't have time to investigate more now).@Fred-Barclay commented on GitHub (Aug 5, 2019):
It should be fixed now --just add
debian_versionto theprivate-etcline.Cheers!
Fred
@reinerh commented on GitHub (Aug 5, 2019):
Wow, that's crazy. The program doesn't work if it can't determine the version of the distribution?
@j1r1k commented on GitHub (Aug 5, 2019):
Thanks for finding this, I submited PR fixing this in fedora as well.
@j1r1k commented on GitHub (Aug 5, 2019):
My bad, it actually does not fix it in fedora, I forgot to get rid of the
ignore private-etcoverride. I will look into it later.@rusty-snake commented on GitHub (Aug 5, 2019):
Fedora has also
fedora-release,os-release,redhat-release,system-release(
ls -l /etc/*release).@j1r1k commented on GitHub (Aug 5, 2019):
Thanks for pointing out. It works on fedora with all release files listed.
@rusty-snake commented on GitHub (Aug 5, 2019):
No idea what they did that a program totally breaks without OS release infos?
maybe we need more on other distros.
@daks commented on GitHub (Aug 7, 2019):
Thanks, I added a "slack.local" with the "private-etc" from the commit and it works :)