mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 22:01:33 -06:00
[GH-ISSUE #3474] Riot-desktop does not launch #2183
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#2183
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @blackpidgeon on GitHub (Jun 21, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3474
The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now. You need to make sure that /opt/Riot/chrome-sandbox is owned by root and has mode 4755.
I have tried the tricks mentioned in #2946 with no success
@rusty-snake commented on GitHub (Jun 22, 2020):
Is
force-nonewprivs yesset in /etc/firejail/firejail.config?What is your firejail version? distro?
@bbhtt commented on GitHub (Jul 1, 2020):
Seems to be an issue regarding Electron and not Firejail perhaps, can you try checking the permissions of that file and setting it to root and/or the workaround(s) here https://github.com/vector-im/riot-web/issues/10509
For Xubuntu 20.04, things work fine with the default profiles and no extra config made.
-rwsr-xr-x 1 root root 6259104 Jun 29 21:29 /opt/Riot/chrome-sandbox@rusty-snake commented on GitHub (Jul 1, 2020):
@blackpidgeon Does it work with
--noprofile?BTW: It would be helpful if you put such error messages in quotes or code-blocks, since such error-messages have no "technical" things in it.
@kortewegdevries It's very likely that the file has the right permissions. (if it works without firejail we know it sure). Firejail features such as
nonewprivscan "skip" the suid-bit.@rusty-snake commented on GitHub (Sep 1, 2020):
I'm closing here due to inactivity, please fell free to request to reopen if you still have this issue.