github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #3627] X11 security #2279

New issue

Open

opened 2026-05-05 08:58:11 -06:00 by gitea-mirror · 6 comments

gitea-mirror commented

2026-05-05 08:58:11 -06:00

Owner

Originally created by @alxchk on GitHub (Sep 9, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3627

Firejail (latest master) with --x11=xorg option failed to start.

> firejail --version
firejail version 0.9.63

Compile time support:
	- AppArmor support is enabled
	- AppImage support is enabled
	- chroot support is enabled
	- file and directory whitelisting support is enabled
	- file transfer support is enabled
	- firetunnel support is disabled
	- networking support is enabled
	- overlayfs support is enabled
	- private-home support is enabled
	- SELinux support is disabled
	- user namespace support is enabled
	- X11 sandboxing support is enabled

> /usr/bin/firejail --x11=xorg /bin/bash                            
Reading profile /etc/firejail/default.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc

** Note: you can use --noprofile to disable default.profile **

Parent pid 568591, child pid 568592
Generating a new .Xauthority file
No protocol specified
/run/firejail/mnt/xauth: (argv):1:  unable to open display ":0".
Error: failed to run /run/firejail/mnt/xauth
Error: proc 568591 cannot sync with peer: unexpected EOF
Peer 568592 unexpectedly exited with status 1

Originally created by @alxchk on GitHub (Sep 9, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3627 Firejail (latest master) with --x11=xorg option failed to start. ``` > firejail --version firejail version 0.9.63 Compile time support: - AppArmor support is enabled - AppImage support is enabled - chroot support is enabled - file and directory whitelisting support is enabled - file transfer support is enabled - firetunnel support is disabled - networking support is enabled - overlayfs support is enabled - private-home support is enabled - SELinux support is disabled - user namespace support is enabled - X11 sandboxing support is enabled ``` ``` > /usr/bin/firejail --x11=xorg /bin/bash Reading profile /etc/firejail/default.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-passwdmgr.inc Reading profile /etc/firejail/disable-programs.inc ** Note: you can use --noprofile to disable default.profile ** Parent pid 568591, child pid 568592 Generating a new .Xauthority file No protocol specified /run/firejail/mnt/xauth: (argv):1: unable to open display ":0". Error: failed to run /run/firejail/mnt/xauth Error: proc 568591 cannot sync with peer: unexpected EOF Peer 568592 unexpectedly exited with status 1 ```

gitea-mirror commented

2026-05-05 08:58:13 -06:00

Author

Owner

@rusty-snake commented on GitHub (Sep 9, 2020):

Distro?

Looks like #1741. Can you confirm?

EDIT: see also #1065.

@rusty-snake commented on GitHub (Sep 9, 2020): Distro? Looks like #1741. Can you confirm? EDIT: see also #1065.

gitea-mirror commented

2026-05-05 08:58:14 -06:00

Author

Owner

@alxchk commented on GitHub (Sep 9, 2020):

Distro?

Gentoo

Looks like #1741. Can you confirm?

Looks similar. Disabling X authorization using xhost "fixes" this.

@alxchk commented on GitHub (Sep 9, 2020): > Distro? Gentoo > Looks like #1741. Can you confirm? Looks similar. Disabling X authorization using xhost "fixes" this.

gitea-mirror commented

2026-05-05 08:58:15 -06:00

Author

Owner

@rusty-snake commented on GitHub (Sep 9, 2020):

Distro?

Gentoo

There is also #1197.

@rusty-snake commented on GitHub (Sep 9, 2020): > > Distro? > > Gentoo There is also #1197.

gitea-mirror commented

2026-05-05 08:58:16 -06:00

Author

Owner

@alxchk commented on GitHub (Sep 9, 2020):

I do have security extension enabled. Here is likely more about strange Xauthority passing to the jail

@alxchk commented on GitHub (Sep 9, 2020): I do have security extension enabled. Here is likely more about strange Xauthority passing to the jail

gitea-mirror commented

2026-05-05 08:58:16 -06:00

Author

Owner

@rusty-snake commented on GitHub (Apr 6, 2021):

Any progress here?

@rusty-snake commented on GitHub (Apr 6, 2021): Any progress here?

gitea-mirror commented

2026-05-05 08:58:17 -06:00

Author

Owner

@alxchk commented on GitHub (Apr 7, 2021):

I didn't make any further research about the matter after that. Same behavior with current master and I don't see easy way to troubleshoot this.

@alxchk commented on GitHub (Apr 7, 2021): I didn't make any further research about the matter after that. Same behavior with current master and I don't see easy way to troubleshoot this.