github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #3457] Warning & errors in terminal when firejail browsers #2175

New issue

Closed

opened 2026-05-05 08:51:17 -06:00 by gitea-mirror · 3 comments

gitea-mirror commented

2026-05-05 08:51:17 -06:00

Owner

Originally created by @Nokia808 on GitHub (Jun 7, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3457

Hi. I noticed that when I run browsers sandbox by firejail from terminal, the terminal showing me warning / errors ... The browsers launched & usable, & all sandboxes appear on run "firejail --list". I think that these are merely a cosmetic warning & errors. However, to be sure from that please look to them:

with "firejail firefox"

Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Warning: cleaning all supplementary groups
Warning: cleaning all supplementary groups
Post-exec seccomp protector enabled
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Child process initialized in 274.55 ms

with "firejail icecat"

Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Warning: cleaning all supplementary groups
Warning: cleaning all supplementary groups
 Post-exec seccomp protector enabled
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Child process initialized in 187.56 ms
[Parent 7, Gecko_IOThread] WARNING: pipe error (55): Connection reset by peer: file /builddir/build/BUILD/icecat-68.8.0/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 358
[Parent 7, Gecko_IOThread] WARNING: pipe error (98): Connection reset by peer: file /builddir/build/BUILD/icecat-68.8.0/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 358

with "firejail torbrowser-launcher"

Warning fcopy: skipping /etc/alternatives/itweb-settings, cannot find inode
Warning fcopy: skipping /etc/alternatives/unrar.1.gz, cannot find inode
Warning fcopy: skipping /etc/alternatives/libjavaplugin.so.x86_64, cannot find inode
Warning fcopy: skipping /etc/alternatives/ControlPanel, cannot find inode
Warning fcopy: skipping /etc/alternatives/unrar, cannot find inode
Warning fcopy: skipping /etc/alternatives/javaws, cannot find inode
Warning fcopy: skipping /etc/alternatives/javaws.x86_64, cannot find inode
Warning fcopy: skipping /etc/alternatives/policyeditor, cannot find inode
Warning fcopy: skipping /etc/alternatives/javaws.noarch, cannot find inode
Warning: skipping ca-certificates for private /etc
Private /etc installed in 592.68 ms
52 programs installed in 181.05 ms
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Warning: cleaning all supplementary groups
Post-exec seccomp protector enabled
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Child process initialized in 1100.25 ms
Tor Browser Launcher
By Micah Lee, licensed under MIT
version 0.3.2
https://github.com/micahflee/torbrowser-launcher
Launching Tor Browser.
Running /home/myusername/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/start-tor-browser.desktop
Launching './Browser/start-tor-browser --detach'...
./Browser/start-tor-browser: line 94: id: command not found
./Browser/start-tor-browser: line 94: [: : integer expression expected

I'm on Fedora Linux 32 X64 bit Cinnamon edition.

Originally created by @Nokia808 on GitHub (Jun 7, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3457 Hi. I noticed that when I run browsers sandbox by firejail from terminal, the terminal showing me warning / errors ... The browsers launched & usable, & all sandboxes appear on run "firejail --list". I think that these are merely a cosmetic warning & errors. However, to be sure from that please look to them: 1) with "firejail firefox" ``` Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. Warning: cleaning all supplementary groups Warning: cleaning all supplementary groups Post-exec seccomp protector enabled Seccomp list in: !chroot, check list: @default-keep, prelist: unknown, Child process initialized in 274.55 ms ``` 2) with "firejail icecat" ``` Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. Warning: cleaning all supplementary groups Warning: cleaning all supplementary groups Post-exec seccomp protector enabled Seccomp list in: !chroot, check list: @default-keep, prelist: unknown, Child process initialized in 187.56 ms [Parent 7, Gecko_IOThread] WARNING: pipe error (55): Connection reset by peer: file /builddir/build/BUILD/icecat-68.8.0/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 358 [Parent 7, Gecko_IOThread] WARNING: pipe error (98): Connection reset by peer: file /builddir/build/BUILD/icecat-68.8.0/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 358 ``` 3) with "firejail torbrowser-launcher" ``` Warning fcopy: skipping /etc/alternatives/itweb-settings, cannot find inode Warning fcopy: skipping /etc/alternatives/unrar.1.gz, cannot find inode Warning fcopy: skipping /etc/alternatives/libjavaplugin.so.x86_64, cannot find inode Warning fcopy: skipping /etc/alternatives/ControlPanel, cannot find inode Warning fcopy: skipping /etc/alternatives/unrar, cannot find inode Warning fcopy: skipping /etc/alternatives/javaws, cannot find inode Warning fcopy: skipping /etc/alternatives/javaws.x86_64, cannot find inode Warning fcopy: skipping /etc/alternatives/policyeditor, cannot find inode Warning fcopy: skipping /etc/alternatives/javaws.noarch, cannot find inode Warning: skipping ca-certificates for private /etc Private /etc installed in 592.68 ms 52 programs installed in 181.05 ms Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. Warning: cleaning all supplementary groups Post-exec seccomp protector enabled Seccomp list in: !chroot, check list: @default-keep, prelist: unknown, Child process initialized in 1100.25 ms Tor Browser Launcher By Micah Lee, licensed under MIT version 0.3.2 https://github.com/micahflee/torbrowser-launcher Launching Tor Browser. Running /home/myusername/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/start-tor-browser.desktop Launching './Browser/start-tor-browser --detach'... ./Browser/start-tor-browser: line 94: id: command not found ./Browser/start-tor-browser: line 94: [: : integer expression expected ``` I'm on Fedora Linux 32 X64 bit Cinnamon edition.

gitea-mirror

2026-05-05 08:51:17 -06:00

closed this issue
added the
information_old
label

gitea-mirror commented

2026-05-05 08:51:20 -06:00

Author

Owner

@Nokia808 commented on GitHub (Jun 7, 2020):

Please notice that regarding IceCat I run the test while it configured by FoxyProxy to connect to i2p via i2pd & i2pd was not launched.

@Nokia808 commented on GitHub (Jun 7, 2020): Please notice that regarding IceCat I run the test while it configured by FoxyProxy to connect to i2p via i2pd & i2pd was not launched.

gitea-mirror commented

2026-05-05 08:51:21 -06:00

Author

Owner

@rusty-snake commented on GitHub (Jun 7, 2020):

All expected. You can find explanation to them in other issues/PRs.

Warning fcopy: skipping /etc/alternatives/policyeditor, cannot find inode

private-etc contains alternatives, in alternatives is a symlink to /usr/bin/policyeditor (or whatever), but private-bin does not contain policyeditor.

Warning: skipping ca-certificates for private /etc

ca-certificates is the place for certs on Arch, on other distros it is simply ignored.

@rusty-snake commented on GitHub (Jun 7, 2020): All expected. You can find explanation to them in other issues/PRs. > Warning fcopy: skipping /etc/alternatives/policyeditor, cannot find inode `private-etc` contains `alternatives`, in alternatives is a symlink to /usr/bin/policyeditor (or whatever), but `private-bin` does not contain policyeditor. > Warning: skipping ca-certificates for private /etc ca-certificates is the place for certs on Arch, on other distros it is simply ignored.

gitea-mirror commented

2026-05-05 08:51:22 -06:00

Author

Owner

@Nokia808 commented on GitHub (Jun 7, 2020):

@rusty-snake
Many thanks ! I will close this issue.

@Nokia808 commented on GitHub (Jun 7, 2020): @rusty-snake Many thanks ! I will close this issue.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2175

No description provided.

Rows
Columns