github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #2943] chromium: program does not start (snap) #1837

New issue

Closed

opened 2026-05-05 08:30:23 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 08:30:23 -06:00

Owner

Originally created by @mjhkqprt51 on GitHub (Sep 6, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2943

This Ubuntu version is still under development. Firejail package version is: 0.9.60-2: amd64.
The problem is that Ubuntu maintainers replaced the deb based chromium packaging to a snap based one which doesn't work well with firejail.

$ chromium-browser
Reading profile /etc/firejail/chromium-browser.profile
Reading profile /etc/firejail/chromium.profile
Reading profile /etc/firejail/chromium-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Warning: networking feature is disabled in Firejail configuration file
Parent pid 32546, child pid 32547
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Warning: Cannot confine the application using AppArmor.
Maybe firejail-default AppArmor profile is not loaded into the kernel.
As root, run "aa-enforce firejail-default" to load it.
Child process initialized in 133.61 ms
mv: '/home/mosomaci/.config/mimeapps.list.new'-t can not be moved here: '/home/mosomaci/.config/mimeapps.list': device or resource is busy
mv: '/home/mosomaci/.config/mimeapps.list.new'-t can not be moved here: '/home/mosomaci/.config/mimeapps.list': device or resource is busy

(process:50): dconf-CRITICAL **: 16:38:45.479: unable to create directory '/run/user/1001/dconf': Access denied. dconf will not work properly.

(process:50): dconf-CRITICAL **: 16:38:45.479: unable to create directory '/run/user/1001/dconf': Access denied. dconf will not work properly.
There is no „com.canonical.Unity.Launcher” scheme
internal error, please report: running "chromium" failed: cannot find installed snap "chromium" at revision 849: missing file /var/lib/snapd/snaps/chromium_849.snap

Parent is shutting down, bye...

Most of the texts were translate by me to English

Enforcing the apparmor firejail profile doesn't help.

Originally created by @mjhkqprt51 on GitHub (Sep 6, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/2943 This Ubuntu version is still under development. Firejail package version is: 0.9.60-2: amd64. The problem is that Ubuntu maintainers replaced the deb based chromium packaging to a snap based one which doesn't work well with firejail. $ chromium-browser Reading profile /etc/firejail/chromium-browser.profile Reading profile /etc/firejail/chromium.profile Reading profile /etc/firejail/chromium-common.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-exec.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-var-common.inc Warning: networking feature is disabled in Firejail configuration file Parent pid 32546, child pid 32547 Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. Warning: Cannot confine the application using AppArmor. Maybe firejail-default AppArmor profile is not loaded into the kernel. As root, run "aa-enforce firejail-default" to load it. Child process initialized in 133.61 ms mv: '/home/mosomaci/.config/mimeapps.list.new'-t can not be moved here: '/home/mosomaci/.config/mimeapps.list': device or resource is busy mv: '/home/mosomaci/.config/mimeapps.list.new'-t can not be moved here: '/home/mosomaci/.config/mimeapps.list': device or resource is busy (process:50): dconf-CRITICAL **: 16:38:45.479: unable to create directory '/run/user/1001/dconf': Access denied. dconf will not work properly. (process:50): dconf-CRITICAL **: 16:38:45.479: unable to create directory '/run/user/1001/dconf': Access denied. dconf will not work properly. There is no „com.canonical.Unity.Launcher” scheme internal error, please report: running "chromium" failed: cannot find installed snap "chromium" at revision 849: missing file /var/lib/snapd/snaps/chromium_849.snap Parent is shutting down, bye... Most of the texts were translate by me to English Enforcing the apparmor firejail profile doesn't help.

gitea-mirror closed this issue

2026-05-05 08:30:24 -06:00

gitea-mirror commented

2026-05-05 08:30:26 -06:00

Author

Owner

@rusty-snake commented on GitHub (Sep 6, 2019):

Hi,

Firejail doesn't support snap, it was droped in version 0.9.60. See #2397 for more informations.

@rusty-snake commented on GitHub (Sep 6, 2019): Hi, Firejail doesn't support snap, it was droped in version 0.9.60. See #2397 for more informations.

gitea-mirror commented

2026-05-05 08:30:27 -06:00

Author

Owner

@mjhkqprt51 commented on GitHub (Sep 6, 2019):

Hi, thanks, no problem. BTW thanks for firejail, it is a great security tool.

@mjhkqprt51 commented on GitHub (Sep 6, 2019): Hi, thanks, no problem. BTW thanks for firejail, it is a great security tool.

gitea-mirror referenced this issue

2026-05-05 10:13:28 -06:00

[PR #1837] [MERGED] WIP: Blacklist common programming interpreters. #4085

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1837

No description provided.

Rows
Columns