github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #3272] Zoom: cannot signin with sso #2054

New issue

Closed

opened 2026-05-05 08:43:33 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 08:43:33 -06:00

Owner

Originally created by @psanford on GitHub (Mar 9, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3272

After clicking "Sign in with SSO" and entering a domain name, zoom launches /opt/zoom/QtWebEngineProcess which segfaults with the following output:

Qt WebEngine ICU data not found at /opt/zoom/resources. Trying parent directory...
Installed Qt WebEngine locales directory not found at location /opt/zoom/translations/qtwebengine_locales. Trying application directory...
Qt WebEngine locales directory not found at location /opt/zoom/qtwebengine_locales. Trying fallback directory... Translations MAY NOT not be correct.
Qt WebEngine resources not found at /opt/zoom/resources. Trying parent directory...
[0309/104752.690573:WARNING:resource_bundle_qt.cpp(115)] locale_file_path.empty() for locale 
Qt WebEngine ICU data not found at /opt/zoom/resources. Trying parent directory...
Installed Qt WebEngine locales directory not found at location /opt/zoom/translations/qtwebengine_locales. Trying application directory...
Qt WebEngine locales directory not found at location /opt/zoom/qtwebengine_locales. Trying fallback directory... Translations MAY NOT not be correct.
Path override failed for key ui::DIR_LOCALES and path '/home/psanford/.QtWebEngineProcess'
Qt WebEngine resources not found at /opt/zoom/resources. Trying parent directory...
[0309/104752.752711:WARNING:resource_bundle_qt.cpp(115)] locale_file_path.empty() for locale 
[14:14:0309/104752.977980:FATAL:zygote_host_impl_linux.cc(196)] Check failed: ReceiveFixedMessage(fds[0], kZygoteHelloMessage, sizeof(kZygoteHelloMessage), &real_pid). 
#0 0x7f247a50e74e <unknown>
#1 0x7f247a52045e <unknown>
#2 0x7f247a18015b <unknown>
#3 0x7f247a17ee7b <unknown>
#4 0x7f247a17f41e <unknown>
#5 0x7f2479e3a59d <unknown>
#6 0x7f2479e3de43 <unknown>
#7 0x7f2479c38c9f <unknown>
#8 0x7f2479c39fa5 <unknown>
#9 0x7f2479c2a089 <unknown>
#10 0x7f2479c2a3de QtWebEngineCore::WebContentsAdapter::WebContentsAdapter()
#11 0x7f247feceef1 <unknown>
#12 0x7f247fecfa64 QWebEnginePage::QWebEnginePage()
#13 0x7f247fedc9cb QWebEngineView::page()
#14 0x00000056f58c <unknown>
#15 0x00000056f740 <unknown>
#16 0x000000572994 <unknown>
#17 0x00000080a225 <unknown>
#18 0x00000080aaab <unknown>
#19 0x7f2477481469 <unknown>
#20 0x7f247740463d <unknown>
#21 0x7f2477405695 <unknown>
#22 0x7f24774067b0 QV4::QObjectMethod::callInternal()
#23 0x7f247741e50b QV4::Runtime::method_callProperty()
#24 0x7f23cc0178f0 <unknown>

Originally created by @psanford on GitHub (Mar 9, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3272 After clicking "Sign in with SSO" and entering a domain name, zoom launches /opt/zoom/QtWebEngineProcess which segfaults with the following output: ``` Qt WebEngine ICU data not found at /opt/zoom/resources. Trying parent directory... Installed Qt WebEngine locales directory not found at location /opt/zoom/translations/qtwebengine_locales. Trying application directory... Qt WebEngine locales directory not found at location /opt/zoom/qtwebengine_locales. Trying fallback directory... Translations MAY NOT not be correct. Qt WebEngine resources not found at /opt/zoom/resources. Trying parent directory... [0309/104752.690573:WARNING:resource_bundle_qt.cpp(115)] locale_file_path.empty() for locale Qt WebEngine ICU data not found at /opt/zoom/resources. Trying parent directory... Installed Qt WebEngine locales directory not found at location /opt/zoom/translations/qtwebengine_locales. Trying application directory... Qt WebEngine locales directory not found at location /opt/zoom/qtwebengine_locales. Trying fallback directory... Translations MAY NOT not be correct. Path override failed for key ui::DIR_LOCALES and path '/home/psanford/.QtWebEngineProcess' Qt WebEngine resources not found at /opt/zoom/resources. Trying parent directory... [0309/104752.752711:WARNING:resource_bundle_qt.cpp(115)] locale_file_path.empty() for locale [14:14:0309/104752.977980:FATAL:zygote_host_impl_linux.cc(196)] Check failed: ReceiveFixedMessage(fds[0], kZygoteHelloMessage, sizeof(kZygoteHelloMessage), &real_pid). #0 0x7f247a50e74e <unknown> #1 0x7f247a52045e <unknown> #2 0x7f247a18015b <unknown> #3 0x7f247a17ee7b <unknown> #4 0x7f247a17f41e <unknown> #5 0x7f2479e3a59d <unknown> #6 0x7f2479e3de43 <unknown> #7 0x7f2479c38c9f <unknown> #8 0x7f2479c39fa5 <unknown> #9 0x7f2479c2a089 <unknown> #10 0x7f2479c2a3de QtWebEngineCore::WebContentsAdapter::WebContentsAdapter() #11 0x7f247feceef1 <unknown> #12 0x7f247fecfa64 QWebEnginePage::QWebEnginePage() #13 0x7f247fedc9cb QWebEngineView::page() #14 0x00000056f58c <unknown> #15 0x00000056f740 <unknown> #16 0x000000572994 <unknown> #17 0x00000080a225 <unknown> #18 0x00000080aaab <unknown> #19 0x7f2477481469 <unknown> #20 0x7f247740463d <unknown> #21 0x7f2477405695 <unknown> #22 0x7f24774067b0 QV4::QObjectMethod::callInternal() #23 0x7f247741e50b QV4::Runtime::method_callProperty() #24 0x7f23cc0178f0 <unknown> ```

gitea-mirror closed this issue

2026-05-05 08:43:34 -06:00

gitea-mirror commented

2026-05-05 08:43:36 -06:00

Author

Owner

@psanford commented on GitHub (Mar 9, 2020):

I was able to get this to work by disabling seccomp and adding netlink to the list of protocols. On subsequent restarts (once I was logged in) reenabling seccomp worked as long as I still had protocol netlink.

It seems like we should at least update the profile to allow for protocol netlink. I'm not sure if we should disable seccomp in the profile since it only affects the sso login workflow and once your logged in you don't need it anymore.

Thoughts?

@psanford commented on GitHub (Mar 9, 2020): I was able to get this to work by disabling `seccomp` and adding `netlink` to the list of protocols. On subsequent restarts (once I was logged in) reenabling `seccomp` worked as long as I still had `protocol netlink`. It seems like we should at least update the profile to allow for `protocol netlink`. I'm not sure if we should disable seccomp in the profile since it only affects the sso login workflow and once your logged in you don't need it anymore. Thoughts?

gitea-mirror commented

2026-05-05 08:43:37 -06:00

Author

Owner

@rusty-snake commented on GitHub (Mar 9, 2020):

It seems like we should at least update the profile to allow for protocol netlink.

yes

I'm not sure if we should disable seccomp in the profile

We should never do this. Instea of disabling seccomp completely it is always better to allow the one or two syscall used by th program. Blocked syscall are logged, can you search for them. journalctl --grep=SECCOMP

@rusty-snake commented on GitHub (Mar 9, 2020): > It seems like we should at least update the profile to allow for `protocol netlink`. yes > I'm not sure if we should disable seccomp in the profile We should never do this. Instea of disabling seccomp completely it is always better to allow the one or two syscall used by th program. Blocked syscall are logged, can you search for them. `journalctl --grep=SECCOMP`

gitea-mirror referenced this issue

2026-05-05 10:14:51 -06:00

[PR #2054] [CLOSED] firefox-beta #4159

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2054

No description provided.

Rows
Columns