github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6

[GH-ISSUE #3633] chromium-privacy-browser: program does not start #2285

New issue
Closed
opened 2026-05-05 08:58:30 -06:00 by gitea-mirror · 8 comments
gitea-mirror commented 2026-05-05 08:58:30 -06:00
Owner
Copy link

Originally created by @brianpepino on GitHub (Sep 17, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3633

I got this error when using firejail to run chromium-privacy-browser:

Reading profile /etc/firejail/default.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc

** Note: you can use --noprofile to disable default.profile **

Parent pid 144065, child pid 144066
Warning: cleaning all supplementary groups
Child process initialized in 33.87 ms
[3:3:0917/174043.946346:FATAL:zygote_host_impl_linux.cc(203)] Check failed: ReceiveFixedMessage(fds[0], kZygoteHelloMessage, sizeof(kZygoteHelloMessage), &real_pid).
#0 0x55e9a7d15829 base::debug::CollectStackTrace()

Received signal 6
#0 0x55e9a7d15829 base::debug::CollectStackTrace()
r8: 0000000000000000 r9: 00007ffdd7c67790 r10: 0000000000000008 r11: 0000000000000246
r12: 00007ffdd7c68a00 r13: 00007ffdd7c68a10 r14: 00000000000000a6 r15: 00007ffdd7c689f0
di: 0000000000000002 si: 00007ffdd7c67790 bp: 00007ffdd7c679e0 bx: 00007f690ac57240
dx: 0000000000000000 ax: 0000000000000000 cx: 00007f690e1a09e5 sp: 00007ffdd7c67790
ip: 00007f690e1a09e5 efl: 0000000000000246 cgf: 002b000000000033 erf: 0000000000000000
trp: 0000000000000000 msk: 0000000000000000 cr2: 0000000000000000
[end of stack trace]
Calling _exit(1). Core file will not be generated.

Parent is shutting down, bye...

I also get the same error when I use firejail to launch Chromium-freeworld.

Any idea on how to solve this?

Thanks

Originally created by @brianpepino on GitHub (Sep 17, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3633 I got this error when using firejail to run chromium-privacy-browser: Reading profile /etc/firejail/default.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-passwdmgr.inc Reading profile /etc/firejail/disable-programs.inc ** Note: you can use --noprofile to disable default.profile ** Parent pid 144065, child pid 144066 Warning: cleaning all supplementary groups Child process initialized in 33.87 ms [3:3:0917/174043.946346:FATAL:zygote_host_impl_linux.cc(203)] Check failed: ReceiveFixedMessage(fds[0], kZygoteHelloMessage, sizeof(kZygoteHelloMessage), &real_pid). #0 0x55e9a7d15829 base::debug::CollectStackTrace() Received signal 6 #0 0x55e9a7d15829 base::debug::CollectStackTrace() r8: 0000000000000000 r9: 00007ffdd7c67790 r10: 0000000000000008 r11: 0000000000000246 r12: 00007ffdd7c68a00 r13: 00007ffdd7c68a10 r14: 00000000000000a6 r15: 00007ffdd7c689f0 di: 0000000000000002 si: 00007ffdd7c67790 bp: 00007ffdd7c679e0 bx: 00007f690ac57240 dx: 0000000000000000 ax: 0000000000000000 cx: 00007f690e1a09e5 sp: 00007ffdd7c67790 ip: 00007f690e1a09e5 efl: 0000000000000246 cgf: 002b000000000033 erf: 0000000000000000 trp: 0000000000000000 msk: 0000000000000000 cr2: 0000000000000000 [end of stack trace] Calling _exit(1). Core file will not be generated. Parent is shutting down, bye... I also get the same error when I use firejail to launch Chromium-freeworld. Any idea on how to solve this? Thanks
gitea-mirror commented 2026-05-05 08:58:32 -06:00
Author
Owner
Copy link

@rusty-snake commented on GitHub (Sep 17, 2020):

chromium-privacy-browser has no profile, therefore firejail uses default.profile. You can try to use the chromium.profile (firejail --profile=chromium chromium-privacy-browser). If that still don't work, copy the chromium/chromium-common profile to ~/.config/firejail (maybe you need to create that directory) and change some paths.

<!-- gh-comment-id:694160369 --> @rusty-snake commented on GitHub (Sep 17, 2020): chromium-privacy-browser has no profile, therefore firejail uses default.profile. You can try to use the chromium.profile (`firejail --profile=chromium chromium-privacy-browser`). If that still don't work, copy the chromium/chromium-common profile to ~/.config/firejail (maybe you need to create that directory) and change some paths.
gitea-mirror commented 2026-05-05 08:58:33 -06:00
Author
Owner
Copy link

@brianpepino commented on GitHub (Sep 24, 2020):

chromium-privacy-browser has no profile, therefore firejail uses default.profile. You can try to use the chromium.profile (firejail --profile=chromium chromium-privacy-browser). If that still don't work, copy the chromium/chromium-common profile to ~/.config/firejail (maybe you need to create that directory) and change some paths.

Apologies for the delay in responding to you.

I tried your suggestion and it launched Chromium but with this error:

firejail --profile=chromium chromium-freeworld
Reading profile /etc/firejail/chromium.profile
Reading profile /etc/firejail/chromium-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 171133, child pid 171134
Child process initialized in 71.89 ms
Warning: an existing sandbox was detected. /usr/bin/chromium-freeworld will run without any additional sandboxing features
/usr/bin/chromium-freeworld: line 52: /dev/fd/62: No such file or directory
/usr/bin/chromium-freeworld: line 53: /dev/fd/62: No such file or directory
[4:24:0924/103132.165699:ERROR:address_tracker_linux.cc(214)] Could not bind NETLINK socket: Address already in use (98)
[44:44:0924/103132.187920:ERROR:vaapi_wrapper.cc(436)] vaInitialize failed: unknown libva error

My apologies but I am out of my depth here as to the cause of this. Perhaps it is my distro? I am using Fedora 32.

In addition, when I launched Chromium using its icon it does not respect firejail even though I already linked it.

Any suggestions?

My apologies for all this hassle. Thank you so much for your help.

<!-- gh-comment-id:698043100 --> @brianpepino commented on GitHub (Sep 24, 2020): > chromium-privacy-browser has no profile, therefore firejail uses default.profile. You can try to use the chromium.profile (`firejail --profile=chromium chromium-privacy-browser`). If that still don't work, copy the chromium/chromium-common profile to ~/.config/firejail (maybe you need to create that directory) and change some paths. Apologies for the delay in responding to you. I tried your suggestion and it launched Chromium but with this error: firejail --profile=chromium chromium-freeworld Reading profile /etc/firejail/chromium.profile Reading profile /etc/firejail/chromium-common.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-exec.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-var-common.inc Parent pid 171133, child pid 171134 Child process initialized in 71.89 ms Warning: an existing sandbox was detected. /usr/bin/chromium-freeworld will run without any additional sandboxing features /usr/bin/chromium-freeworld: line 52: /dev/fd/62: No such file or directory /usr/bin/chromium-freeworld: line 53: /dev/fd/62: No such file or directory [4:24:0924/103132.165699:ERROR:address_tracker_linux.cc(214)] Could not bind NETLINK socket: Address already in use (98) [44:44:0924/103132.187920:ERROR:vaapi_wrapper.cc(436)] vaInitialize failed: unknown libva error My apologies but I am out of my depth here as to the cause of this. Perhaps it is my distro? I am using Fedora 32. In addition, when I launched Chromium using its icon it does not respect firejail even though I already linked it. Any suggestions? My apologies for all this hassle. Thank you so much for your help.
gitea-mirror commented 2026-05-05 08:58:34 -06:00
Author
Owner
Copy link

@rusty-snake commented on GitHub (Sep 24, 2020):

it launched Chromium but with this error

Is something broken or are there just error messages? What's your firejail version?

In addition, when I launched Chromium using its icon it does not respect firejail even though I already linked it.

This is likely caused by an absolute path in its .desktop file. Copy it to your home and change the line Exec=/usr/bin/chromium-freeworld to Exec=chromium-freeworld.

Assuming is uses chromium-freeworld.desktop:

cp /usr/share/applications/chromium-freeworld.desktop ~/.local/share/applications
vim ~/.local/share/applications/chromium-freeworld.desktop

I tried your suggestion and it launched Chromium

So no other config files needed. You can create ~/.config/firejail/ chromium-freeworld.profile to skip the --profile option.

chromium-freeworld.profile:

# Firejail profile for chromium-freeworld
# This file is overwritten after every install/update

# Redirect
include chromium.profile
<!-- gh-comment-id:698165828 --> @rusty-snake commented on GitHub (Sep 24, 2020): > it launched Chromium but with this error Is something broken or are there just error messages? What's your firejail version? > In addition, when I launched Chromium using its icon it does not respect firejail even though I already linked it. This is likely caused by an absolute path in its .desktop file. Copy it to your home and change the line `Exec=/usr/bin/chromium-freeworld` to `Exec=chromium-freeworld`. Assuming is uses chromium-freeworld.desktop: ``` cp /usr/share/applications/chromium-freeworld.desktop ~/.local/share/applications vim ~/.local/share/applications/chromium-freeworld.desktop ``` > I tried your suggestion and it launched Chromium So no other config files needed. You can create `~/.config/firejail/ chromium-freeworld.profile` to skip the `--profile` option. `chromium-freeworld.profile`: ``` # Firejail profile for chromium-freeworld # This file is overwritten after every install/update # Redirect include chromium.profile ```
gitea-mirror commented 2026-05-05 08:58:36 -06:00
Author
Owner
Copy link

@rusty-snake commented on GitHub (Oct 1, 2020):

Does this profile work? If so I can commit it upstream, so the next release can firejail chromium-freeworld with firecfg.

<!-- gh-comment-id:702311942 --> @rusty-snake commented on GitHub (Oct 1, 2020): Does this profile work? If so I can commit it upstream, so the next release can firejail chromium-freeworld with firecfg.
gitea-mirror commented 2026-05-05 08:58:36 -06:00
Author
Owner
Copy link

@brianpepino commented on GitHub (Oct 2, 2020):

Does this profile work? If so I can commit it upstream, so the next release can firejail chromium-freeworld with firecfg.

Thank you for the follow up. I really appreciate it.

The version of firejail I am running is firejail.x86_64 0.9.62.4-1.fc32.

Regarding the error message, the one I posted above is the only error message I got but even with that error message Firjeail managed to run Chromium Freeworld and jail it.

As to the steps you enumerated, I used it and I was able to run chromium-freeworld inside firejail when I type on my terminal "chromium-freeworld" but with this error message:

chromium-freeworld
Reading profile /home/weatherman/.config/firejail/chromium-freeworld.profile
Reading profile /etc/firejail/chromium.profile
Reading profile /etc/firejail/chromium-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 145383, child pid 145384
Child process initialized in 74.52 ms
/usr/bin/chromium-freeworld: line 52: /dev/fd/62: No such file or directory
/usr/bin/chromium-freeworld: line 53: /dev/fd/62: No such file or directory
[4:24:1002/123525.290298:ERROR:address_tracker_linux.cc(214)] Could not bind NETLINK socket: Address already in use (98)
[44:44:1002/123525.324766:ERROR:vaapi_wrapper.cc(436)] vaInitialize failed: unknown libva error

Next, when I click my Chromium Freeworld icon it will launch but not inside firejail. I am using Cinnamon Desktop Environment.

Sorry but anything else I should do at this point? I feel we are at a point that this thing will be solved except I am simply lost as to what else to do. Sorry.

Thank you so much for the quick response and assistance. I really appreciate it.

<!-- gh-comment-id:702496014 --> @brianpepino commented on GitHub (Oct 2, 2020): > Does this profile work? If so I can commit it upstream, so the next release can firejail chromium-freeworld with firecfg. Thank you for the follow up. I really appreciate it. The version of firejail I am running is firejail.x86_64 0.9.62.4-1.fc32. Regarding the error message, the one I posted above is the only error message I got but even with that error message Firjeail managed to run Chromium Freeworld and jail it. As to the steps you enumerated, I used it and I was able to run chromium-freeworld inside firejail when I type on my terminal "chromium-freeworld" but with this error message: chromium-freeworld Reading profile /home/weatherman/.config/firejail/chromium-freeworld.profile Reading profile /etc/firejail/chromium.profile Reading profile /etc/firejail/chromium-common.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-exec.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-var-common.inc Parent pid 145383, child pid 145384 Child process initialized in 74.52 ms /usr/bin/chromium-freeworld: line 52: /dev/fd/62: No such file or directory /usr/bin/chromium-freeworld: line 53: /dev/fd/62: No such file or directory [4:24:1002/123525.290298:ERROR:address_tracker_linux.cc(214)] Could not bind NETLINK socket: Address already in use (98) [44:44:1002/123525.324766:ERROR:vaapi_wrapper.cc(436)] vaInitialize failed: unknown libva error Next, when I click my Chromium Freeworld icon it will launch but not inside firejail. I am using Cinnamon Desktop Environment. Sorry but anything else I should do at this point? I feel we are at a point that this thing will be solved except I am simply lost as to what else to do. Sorry. Thank you so much for the quick response and assistance. I really appreciate it.
gitea-mirror commented 2026-05-05 08:58:37 -06:00
Author
Owner
Copy link

@rusty-snake commented on GitHub (Oct 3, 2020):

but with this error message

If nothing is broken, that's fine. The first three I saw often with chromium-based browsers. The last is about VA-API which is almost useless for Chrome+Linux AFAIK.

Next, when I click my Chromium Freeworld icon it will launch but not inside firejail. I am using Cinnamon Desktop Environment.

Did you tried my suggestion above?

<!-- gh-comment-id:703097933 --> @rusty-snake commented on GitHub (Oct 3, 2020): > but with this error message If nothing is broken, that's fine. The first three I saw often with chromium-based browsers. The last is about VA-API which is almost useless for Chrome+Linux AFAIK. > Next, when I click my Chromium Freeworld icon it will launch but not inside firejail. I am using Cinnamon Desktop Environment. Did you tried my suggestion above?
gitea-mirror commented 2026-05-05 08:58:38 -06:00
Author
Owner
Copy link

@brianpepino commented on GitHub (Oct 5, 2020):

but with this error message

If nothing is broken, that's fine. The first three I saw often with chromium-based browsers. The last is about VA-API which is almost useless for Chrome+Linux AFAIK.

Next, when I click my Chromium Freeworld icon it will launch but not inside firejail. I am using Cinnamon Desktop Environment.

Did you tried my suggestion above?

Hi! I did this "cp /usr/share/applications/chromium-freeworld.desktop ~/.local/share/applications
vim ~/.local/share/applications/chromium-freeworld.desktop" and even edited my chromium-freeworld.desktop file to include this line "Exec=chromium-freeworld --incognito" but it is still not respecting firejail.

Did I miss anything?

Thanks.

<!-- gh-comment-id:703377867 --> @brianpepino commented on GitHub (Oct 5, 2020): > > but with this error message > > If nothing is broken, that's fine. The first three I saw often with chromium-based browsers. The last is about VA-API which is almost useless for Chrome+Linux AFAIK. > > > Next, when I click my Chromium Freeworld icon it will launch but not inside firejail. I am using Cinnamon Desktop Environment. > > Did you tried my suggestion above? Hi! I did this "cp /usr/share/applications/chromium-freeworld.desktop ~/.local/share/applications vim ~/.local/share/applications/chromium-freeworld.desktop" and even edited my chromium-freeworld.desktop file to include this line "Exec=chromium-freeworld --incognito" but it is still not respecting firejail. Did I miss anything? Thanks.
gitea-mirror commented 2026-05-05 08:58:39 -06:00
Author
Owner
Copy link

@rusty-snake commented on GitHub (Oct 6, 2020):

Sum up: ~/.local/share/applications/chromium-freeworld.desktop does not contain /usr/bin/chromium-freewold (or similar) and which chromium-freeworld shows /usr/local/bin/chromium-freewold (the firecfg symlink).

If this still not respects firejail, I cann't help because IDK how cinnamon's menu works.

<!-- gh-comment-id:704188748 --> @rusty-snake commented on GitHub (Oct 6, 2020): Sum up: ~/.local/share/applications/chromium-freeworld.desktop does not contain /usr/bin/chromium-freewold (or similar) and `which chromium-freeworld` shows /usr/local/bin/chromium-freewold (the firecfg symlink). If this still not respects firejail, I cann't help because IDK how cinnamon's menu works.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
master
serialize_remounts_v2
landlock_v4
landlock
release-0.9.64
release-0.9.62
gitlab_ci
LTSbase
fred_ctests
docs
0.9.80
0.9.80-rc1
0.9.78
0.9.76
0.9.76-rc4
0.9.76-rc3
0.9.76-rc2
0.9.76-rc1
0.9.74
landlock-split
0.9.72
0.9.72rc1
0.9.70
0.9.68
0.9.68rc1
0.9.66
0.9.66rc1
0.9.64.4
0.9.64.2
0.9.64
0.9.64rc1
0.9.62.4
0.9.62.2
0.9.62
0.9.56.2-LTS
0.9.60
0.9.60-rc1
0.9.58.2
0.9.58
0.9.58-rc1
0.9.56-LTS-release
0.9.56-LTS
0.9.56
0.9.56-rc1
0.9.54
0.9.54-rc2
0.9.54-rc1
0.9.52
0.9.38.12
0.9.50
0.9.50-rc1
0.9.48
0.9.46
0.9.46-rc1
0.9.44.10
0.9.44.8
0.9.44.6
0.9.38.10
0.9.44.4
0.9.38.8
0.9.44.2
0.9.44
0.9.44-rc1
0.9.38.4
0.9.42
0.9.42-rc2
0.9.38.2
0.9.42-rc1
disable-globalcfg
0.9.40
0.9.40-rc1
0.9.38
0.9.38-rc1
0.9.36
0.9.36-rc1
0.9.34
0.9.34-rc1
0.9.32
0.9.32-rc1
0.9.30
0.9.30-rc1
Labels
Clear labels   
LTS merge

   
LTS merge

   
bug

   
bug

   
converted-to-discussion

   
doc-todo

   
documentation

   
duplicate

   
enhancement

   
file-transfer

   
firecfg

   
firejail-in-firejail

   
firetools

   
graphics

   
help wanted

   
information_old

   
installation

   
invalid

   
modif

   
moved

   
needinfo

   
networking

   
notabug

   
notourbug

   
old-version

   
overlayfs

   
packaging

   
profile-request

   
pull-request

Mirrored from GitHub Pull Request

  
question

   
question_old

   
removal

   
runtime-permissions

   
sandbox-ipc

   
security

   
stale

   
wiki

   
wiki

   
wontfix

   
wordpress

   
workaround
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2285
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?