github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #3227] firefox: libGL error: MESA-LOADER: failed to retrieve device information (AppArmor) #2024

New issue

Closed

opened 2026-05-05 08:41:41 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 08:41:41 -06:00

Owner

Originally created by @curiosityseeker on GitHub (Feb 15, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3227

Regardless if I execute

firejail firefox

firejail --noprofile firefox

on Arch Linux I'm getting the following error:

[2020-02-15T14:25:39Z ERROR audio_thread_priority::rt_linux] setrlimit64: 1
libGL error: MESA-LOADER: failed to retrieve device information
libGL error: Version 4 or later of flush extension not found
libGL error: failed to load driver: i915

This does not happen if I bypass Firejail by executing /usr/bin/firefox(which in turn means that AppArmor is not the culprit).

Originally created by @curiosityseeker on GitHub (Feb 15, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3227 Regardless if I execute `firejail firefox` or `firejail --noprofile firefox` on Arch Linux I'm getting the following error: ``` [2020-02-15T14:25:39Z ERROR audio_thread_priority::rt_linux] setrlimit64: 1 libGL error: MESA-LOADER: failed to retrieve device information libGL error: Version 4 or later of flush extension not found libGL error: failed to load driver: i915 ``` This does ***not*** happen if I bypass Firejail by executing `/usr/bin/firefox`(which in turn means that AppArmor is not the culprit).

gitea-mirror

2026-05-05 08:41:41 -06:00

closed this issue
added the
graphics

notabug
labels

gitea-mirror commented

2026-05-05 08:41:43 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (Feb 15, 2020):

What is the output of locate libGL.so?

@chiraag-nataraj commented on GitHub (Feb 15, 2020): What is the output of `locate libGL.so`?

gitea-mirror commented

2026-05-05 08:41:46 -06:00

Author

Owner

@curiosityseeker commented on GitHub (Feb 16, 2020):

locate libGL.so gives

/usr/lib/libGL.so
/usr/lib/libGL.so.1
/usr/lib/libGL.so.1.7.0

However, after some more digging I found that it was an AppArmor problem (although I didn't get that error when starting Firefox unfirejailed - strange!). I found the following in journalctl:

AVC apparmor="DENIED" operation="getattr" info="Failed name lookup - disconnected path" error=-13 profile="firefox" name="dev/dri/card0" pid=7218 comm="Renderer" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0

After adding the following flag to the AA profile:
profile firefox /usr/lib/firefox/firefox flags=(attach_disconnected)

the error message regrading libGL is no longer shown. (The audio_thread_priority error is stlll there, though)

@curiosityseeker commented on GitHub (Feb 16, 2020): locate libGL.so gives ``` /usr/lib/libGL.so /usr/lib/libGL.so.1 /usr/lib/libGL.so.1.7.0 ``` However, after some more digging I found that it **was** an AppArmor problem (although I didn't get that error when starting Firefox unfirejailed - strange!). I found the following in journalctl: ``` AVC apparmor="DENIED" operation="getattr" info="Failed name lookup - disconnected path" error=-13 profile="firefox" name="dev/dri/card0" pid=7218 comm="Renderer" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 ``` After adding the following flag to the AA profile: `profile firefox /usr/lib/firefox/firefox flags=(attach_disconnected)` the error message regrading libGL is no longer shown. (The audio_thread_priority error is stlll there, though)

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2024

No description provided.

Rows
Columns