[GH-ISSUE #3039] Cant run firejail firefox #1908

Closed
opened 2026-05-05 08:34:24 -06:00 by gitea-mirror · 6 comments
Owner

Originally created by @nsauter on GitHub (Nov 12, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3039

Hi,

maybe im just confused but i cant run a firejail-firefox instance on my computer. Can someone please tell me what i am doing wrong?


$ firejail firefox
Reading profile /etc/firejail/firefox.profile
Reading profile /etc/firejail/firefox-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 390181, child pid 390184
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Warning: cleaning all supplementary groups
Error mount bind: fs_whitelist.c:297 whitelist_path: Permission denied
Error: proc 390181 cannot sync with peer: unexpected EOF
Peer 390184 unexpectedly exited with status 1

Even if i add --net remove unix from protocol set this wont work.

Originally created by @nsauter on GitHub (Nov 12, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/3039 Hi, maybe im just confused but i cant run a firejail-firefox instance on my computer. Can someone please tell me what i am doing wrong? ``` $ firejail firefox Reading profile /etc/firejail/firefox.profile Reading profile /etc/firejail/firefox-common.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-var-common.inc Parent pid 390181, child pid 390184 Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. Warning: cleaning all supplementary groups Error mount bind: fs_whitelist.c:297 whitelist_path: Permission denied Error: proc 390181 cannot sync with peer: unexpected EOF Peer 390184 unexpectedly exited with status 1 ``` Even if i add --net remove unix from protocol set this wont work.
Author
Owner

@rusty-snake commented on GitHub (Nov 12, 2019):

distro, firejail version? output of echo $HOME.

<!-- gh-comment-id:552958590 --> @rusty-snake commented on GitHub (Nov 12, 2019): distro, firejail version? output of `echo $HOME`.
Author
Owner

@nsauter commented on GitHub (Nov 13, 2019):

Fedora 31, but i tried it with every fedora version since 29.

firejail version 0.9.57

$HOME is
/home/nsauter

<!-- gh-comment-id:553278159 --> @nsauter commented on GitHub (Nov 13, 2019): Fedora 31, but i tried it with every fedora version since 29. firejail version 0.9.57 $HOME is /home/nsauter
Author
Owner

@smitsohu commented on GitHub (Nov 13, 2019):

Is /home/nsauter a symbolic link?

Could you run firejail --debug-whitelists firefox?

<!-- gh-comment-id:553323236 --> @smitsohu commented on GitHub (Nov 13, 2019): Is /home/nsauter a symbolic link? Could you run `firejail --debug-whitelists firefox`?
Author
Owner

@nsauter commented on GitHub (Nov 13, 2019):

Its a NFS Mounted Home. But i get the same error with local home.

https://pastebin.com/150z4HNQ

<!-- gh-comment-id:553366149 --> @nsauter commented on GitHub (Nov 13, 2019): Its a NFS Mounted Home. But i get the same error with local home. https://pastebin.com/150z4HNQ
Author
Owner

@Vincent43 commented on GitHub (Nov 14, 2019):

Can you show ls -al /usr/bin/firejail output?

<!-- gh-comment-id:553873615 --> @Vincent43 commented on GitHub (Nov 14, 2019): Can you show `ls -al /usr/bin/firejail` output?
Author
Owner

@nsauter commented on GitHub (Nov 18, 2019):

-rwsr-xr-x 1 root root 395928 29. Jul 10:50 /usr/bin/firejail

<!-- gh-comment-id:554915528 --> @nsauter commented on GitHub (Nov 18, 2019): -rwsr-xr-x 1 root root 395928 29. Jul 10:50 /usr/bin/firejail
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1908
No description provided.