[GH-ISSUE #3645] Unable to watch shows on ctv.ca and globaltv.com using firejail #2297

Closed
opened 2026-05-05 08:59:02 -06:00 by gitea-mirror · 3 comments
Owner

Originally created by @aberja on GitHub (Sep 26, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3645

Shows and movies on ctv.ca and globaltv.com will not run with firejail using Vivaldi or Firefox. I have no issue watching them in Vivaldi and Firefox if I start the browsers outside of firejail.

Bug and expected behavior
Using Vivaldi:

  • On ctv.ca the ads run but when the show is to start I receive an Error Code 246000
  • On globaltv.com the ads run and then when the show is to start, I receive a message that DRM is not supported.

Using Firefox:
With both ctv.ca and globaltv.com I receive a message "The WidevineCdm plugin has crashed when I try to start a show. The advertising continues to play, but not the show. On ctv.ca I see error code 246000.

  • reloading the page and restarting the browser does not start WidevineCdm from crashing.not supported" and a message that "The WidevineCdm plugin has crashed"

No profile or disabling firejail

  • What changed calling firejail --noprofile vivaldi in a shell?
    Nothing changed, same issue as described above

  • What changed calling the program by path=without firejail (check whereis PROGRAM, firejail --list, stat $programpath)?
    I can watch the shows on ctv.ca and globaltv.com if I start the programs without firejail
    g752vs@g752vs:~$ firefox (throws no errors)
    g752vs@g752vs:~$ vivaldi (throws numerous errors, but I can still watch the shows)

Example of some of the errors referred to above:
  g752vs@g752vs:~$ vivaldi
    [18727:18727:0926/115003.287771:ERROR:chrome_content_client.cc(346)] Failed to locate and load the component updated flash plugin.
    [18727:18763:0926/115003.326000:ERROR:database.cc(1584)] Calendar sqlite error 1, errno 0: no such column: etag, sql: update events set etag = ''
    [18727:18763:0926/115003.326020:ERROR:calendar_database.cc(47)] Calendar DB failed to migrate from version 1. Calendar API will be disabled.
    [18727:18763:0926/115003.335133:ERROR:calendar_backend.cc(158)] INIT_TOO_NEW
    [18727:18727:0926/115003.356757:ERROR:browser_switcher_service.cc(238)] XXX Init()
    [18727:18727:0926/115005.261905:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
    [18727:18727:0926/115005.262026:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
    [18727:18727:0926/115005.262090:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)

Reproduce
Steps to reproduce the behavior:

  1. Run in bash firejail vivaldi or 'firejail firefox'
2. I see numerous error messages, but perhaps the relevant one with vivaldi is:
[729:469:0926/113437.145634:ERROR:cdm_module.cc(135)] CDM at /home/g752vs/.config/vivaldi/WidevineCdm/4.10.1610.0/_platform_specific/linux_x64/libwidevinecdm.so could not be loaded.
[729:469:0926/113437.145752:ERROR:cdm_module.cc(136)] Error: /home/g752vs/.config/vivaldi/WidevineCdm/4.10.1610.0/_platform_specific/linux_x64/libwidevinecdm.so: cannot open shared object file: Operation not permitted

Environment

  • Linux Mint LMDE 4 with Kernel Linux 5.7.0-0.bpo.2-amd64 #1 SMP Debian 5.7.10-1~bpo10+1 (2020-07-30) x86_64 GNU/Linux

  • Firejail version 0.9.63 (updated today via github)

  • Vivaldi version 3.0.1874.38 (Stable channel) (64-bit)

  • Firefox version 78.3.0esr (64-bit)

  • All Add-ons / extensions were disabled in vivaldi and firefox

  • Browser level tracking protection was also turned off.

OUTPUT OF `firejail --noprofile vivaldi`
g752vs@g752vs:~$ firejail --noprofile vivaldi
Parent pid 15353, child pid 15354
Child process initialized in 8.13 ms
ERROR: ld.so: object '/var/opt/vivaldi/media-codecs-80.0.3987.149/libffmpeg.so' from LD_PRELOAD cannot be preloaded (failed to map segment from shared object): ignored.
ERROR: ld.so: object '/var/opt/vivaldi/media-codecs-80.0.3987.149/libffmpeg.so' from LD_PRELOAD cannot be preloaded (failed to map segment from shared object): ignored.
ERROR: ld.so: object '/var/opt/vivaldi/media-codecs-80.0.3987.149/libffmpeg.so' from LD_PRELOAD cannot be preloaded (failed to map segment from shared object): ignored.
ERROR: ld.so: object '/var/opt/vivaldi/media-codecs-80.0.3987.149/libffmpeg.so' from LD_PRELOAD cannot be preloaded (failed to map segment from shared object): ignored.
ERROR: ld.so: object '/var/opt/vivaldi/media-codecs-80.0.3987.149/libffmpeg.so' from LD_PRELOAD cannot be preloaded (failed to map segment from shared object): ignored.
[2:2:0926/113035.667171:ERROR:chrome_content_client.cc(346)] Failed to locate and load the component updated flash plugin.
ERROR: ld.so: object '/var/opt/vivaldi/media-codecs-80.0.3987.149/libffmpeg.so' from LD_PRELOAD cannot be preloaded (failed to map segment from shared object): ignored.
ERROR: ld.so: object '/var/opt/vivaldi/media-codecs-80.0.3987.149/libffmpeg.so' from LD_PRELOAD cannot be preloaded (failed to map segment from shared object): ignored.
[2:37:0926/113035.694877:ERROR:database.cc(1584)] Calendar sqlite error 1, errno 0: no such column: etag, sql: update events set etag = ''
[2:37:0926/113035.694904:ERROR:calendar_database.cc(47)] Calendar DB failed to migrate from version 1. Calendar API will be disabled.
[2:37:0926/113035.702436:ERROR:calendar_backend.cc(158)] INIT_TOO_NEW
[2:2:0926/113035.727378:ERROR:browser_switcher_service.cc(238)] XXX Init()
[2:2:0926/113035.991486:ERROR:CONSOLE(14)] "Uncaught (in promise) TypeError: Cannot set property 'hidden' of null", source: chrome://version/version.js (14)
[2:2:0926/113037.552727:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.552825:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.552872:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.552904:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.552953:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.552982:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.553014:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.553046:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.553077:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.553109:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.553140:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.553173:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.553204:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.553235:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.553264:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.553399:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.553437:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.553543:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.553573:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.553603:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.553636:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.553668:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.553700:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.553793:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.553995:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.554260:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.554575:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.554748:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.554788:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.554912:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.554949:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.554982:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.555016:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.555051:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.555085:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.555120:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.555154:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.555188:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.555223:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.555257:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.555291:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.555326:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.555361:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.555396:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.555432:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.555468:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.555504:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.555539:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.555696:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.555732:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.555768:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.555934:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.556022:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.556105:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.556314:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.556352:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.556956:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.557664:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.558128:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.558240:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.558358:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.558505:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.558629:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[2:2:0926/113037.558900:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
ERROR: ld.so: object '/var/opt/vivaldi/media-codecs-80.0.3987.149/libffmpeg.so' from LD_PRELOAD cannot be preloaded (failed to map segment from shared object): ignored.
Fontconfig error: Cannot load default config file: No such file: (null)
Fontconfig error: Cannot load default config file: No such file: (null)
[534:465:0926/113047.320937:ERROR:batching_media_log.cc(38)] MediaEvent: {"error":"video decoder initialization failed"}
[534:349:0926/113047.329717:ERROR:batching_media_log.cc(35)] MediaEvent: {"pipeline_error":15}
[534:465:0926/113047.581828:ERROR:batching_media_log.cc(38)] MediaEvent: {"error":"FFmpegDemuxer: open context failed"}
[534:349:0926/113047.582073:ERROR:batching_media_log.cc(35)] MediaEvent: {"pipeline_error":12}
[534:465:0926/113048.927298:ERROR:batching_media_log.cc(38)] MediaEvent: {"error":"video decoder initialization failed"}
[534:349:0926/113048.931467:ERROR:batching_media_log.cc(35)] MediaEvent: {"pipeline_error":15}
[534:465:0926/113056.399346:ERROR:batching_media_log.cc(38)] MediaEvent: {"error":"FFmpegDemuxer: open context failed"}
[534:349:0926/113056.399596:ERROR:batching_media_log.cc(35)] MediaEvent: {"pipeline_error":12}
[534:465:0926/113056.671129:ERROR:batching_media_log.cc(38)] MediaEvent: {"error":"audio decoder initialization failed"}
[534:349:0926/113056.671984:ERROR:batching_media_log.cc(35)] MediaEvent: {"pipeline_error":15}`
OUTPUT OF `firejail --debug vivaldi`
g752vs@g752vs:~$ firejail --debug vivaldi
Autoselecting /bin/bash as shell
Building quoted command line: 'vivaldi' 
Command name #vivaldi#
Found vivaldi.profile profile in /usr/local/etc/firejail directory
Reading profile /usr/local/etc/firejail/vivaldi.profile
Found chromium-common.profile profile in /usr/local/etc/firejail directory
Reading profile /usr/local/etc/firejail/chromium-common.profile
Found disable-common.inc profile in /usr/local/etc/firejail directory
Reading profile /usr/local/etc/firejail/disable-common.inc
Found disable-devel.inc profile in /usr/local/etc/firejail directory
Reading profile /usr/local/etc/firejail/disable-devel.inc
Found disable-exec.inc profile in /usr/local/etc/firejail directory
Reading profile /usr/local/etc/firejail/disable-exec.inc
Found disable-interpreters.inc profile in /usr/local/etc/firejail directory
Reading profile /usr/local/etc/firejail/disable-interpreters.inc
Found disable-programs.inc profile in /usr/local/etc/firejail directory
Reading profile /usr/local/etc/firejail/disable-programs.inc
Found whitelist-common.inc profile in /usr/local/etc/firejail directory
Reading profile /usr/local/etc/firejail/whitelist-common.inc
Found whitelist-var-common.inc profile in /usr/local/etc/firejail directory
Reading profile /usr/local/etc/firejail/whitelist-var-common.inc
conditional BROWSER_DISABLE_U2F, nou2f
conditional BROWSER_DISABLE_U2F, private-dev
DISPLAY=:0 parsed as 0
Using the local network stack
Parent pid 16198, child pid 16199
Initializing child process
Host network configured
PID namespace installed
Mounting tmpfs on /run/firejail/mnt directory
Creating empty /run/firejail/mnt/seccomp directory
Creating empty /run/firejail/mnt/seccomp/seccomp.protocol file
Creating empty /run/firejail/mnt/seccomp/seccomp.postexec file
Creating empty /run/firejail/mnt/seccomp/seccomp.postexec32 file
IBUS_ADDRESS=unix:abstract=/tmp/dbus-7gj3JyUQ,guid=aa4dfc1ff6e46e02389ab13a5f6f51d0
IBUS_DAEMON_PID=1023
Mounting /proc filesystem representing the PID namespace
Basic read-only filesystem:
Mounting read-only /etc
731 627 259:8 /etc /etc ro,relatime master:1 - ext4 /dev/nvme0n1p3 rw,errors=remount-ro
mountid=731 fsname=/etc dir=/etc fstype=ext4
Mounting noexec /etc
732 731 259:8 /etc /etc ro,nosuid,nodev,noexec,relatime master:1 - ext4 /dev/nvme0n1p3 rw,errors=remount-ro
mountid=732 fsname=/etc dir=/etc fstype=ext4
Mounting read-only /usr
736 627 259:8 /usr /usr ro,relatime master:1 - ext4 /dev/nvme0n1p3 rw,errors=remount-ro
mountid=736 fsname=/usr dir=/usr fstype=ext4
Mounting read-only /bin
737 627 259:8 /bin /bin ro,relatime master:1 - ext4 /dev/nvme0n1p3 rw,errors=remount-ro
mountid=737 fsname=/bin dir=/bin fstype=ext4
Mounting read-only /sbin
761 627 259:8 /sbin /sbin ro,relatime master:1 - ext4 /dev/nvme0n1p3 rw,errors=remount-ro
mountid=761 fsname=/sbin dir=/sbin fstype=ext4
Mounting read-only /lib
762 627 259:8 /lib /lib ro,relatime master:1 - ext4 /dev/nvme0n1p3 rw,errors=remount-ro
mountid=762 fsname=/lib dir=/lib fstype=ext4
Mounting read-only /lib64
825 627 259:8 /lib64 /lib64 ro,relatime master:1 - ext4 /dev/nvme0n1p3 rw,errors=remount-ro
mountid=825 fsname=/lib64 dir=/lib64 fstype=ext4
Mounting tmpfs on /var/lock
Mounting tmpfs on /var/tmp
Mounting tmpfs on /var/log
Mounting tmpfs on /var/lib/dhcp
Mounting tmpfs on /var/lib/snmp
Mounting tmpfs on /var/lib/sudo
Create the new utmp file
Mount the new utmp file
Cleaning /home directory
Cleaning /run/user directory
Sanitizing /etc/passwd, UID_MIN 1000
Sanitizing /etc/group, GID_MIN 1000
Disable /run/firejail/network
Disable /run/firejail/bandwidth
Disable /run/firejail/name
Disable /run/firejail/profile
Disable /run/firejail/x11
Mounting tmpfs on /dev
mounting /run/firejail/mnt/dev/snd directory
mounting /run/firejail/mnt/dev/dri directory
mounting /run/firejail/mnt/dev/nvidia0 file
mounting /run/firejail/mnt/dev/nvidiactl file
mounting /run/firejail/mnt/dev/nvidia-modeset file
mounting /run/firejail/mnt/dev/video0 file
mounting /run/firejail/mnt/dev/video1 file
Process /dev/shm directory
blacklist /run/firejail/dbus
Mounting read-only /proc/sys
Remounting /sys directory
Disable /sys/firmware
Disable /sys/hypervisor
Disable /sys/power
Disable /sys/kernel/debug
Disable /sys/kernel/vmcoreinfo
Disable /proc/sys/fs/binfmt_misc
Disable /proc/sys/kernel/core_pattern
Disable /proc/sys/kernel/modprobe
Disable /proc/sysrq-trigger
Disable /proc/sys/vm/panic_on_oom
Disable /proc/irq
Disable /proc/bus
Disable /proc/sched_debug
Disable /proc/timer_list
Disable /proc/kcore
Disable /proc/kallsyms
Disable /lib/modules
Disable /usr/lib/debug
Disable /boot
Disable /run/user/1000/gnupg
Disable /run/user/1000/systemd
Disable /proc/kmsg
Debug 456: new_name #/var/opt/vivaldi#, whitelist
Debug 456: new_name #/home/g752vs/.cache/vivaldi#, whitelist
Debug 571: fname #/home/g752vs/.cache/vivaldi#, cfg.homedir #/home/g752vs#
Replaced whitelist path: whitelist /home/g752vs/.cache/vivaldi
Debug 456: new_name #/home/g752vs/.config/vivaldi#, whitelist
Debug 571: fname #/home/g752vs/.config/vivaldi#, cfg.homedir #/home/g752vs#
Replaced whitelist path: whitelist /home/g752vs/.config/vivaldi
Debug 456: new_name #/home/g752vs/.local/lib/vivaldi#, whitelist
Debug 571: fname #/home/g752vs/.local/lib/vivaldi#, cfg.homedir #/home/g752vs#
Replaced whitelist path: whitelist /home/g752vs/.local/lib/vivaldi
Directory ${DOWNLOADS} resolved as Downloads
Debug 456: new_name #/home/g752vs/Downloads#, whitelist
Debug 571: fname #/home/g752vs/Downloads#, cfg.homedir #/home/g752vs#
Replaced whitelist path: whitelist /home/g752vs/Downloads
Debug 456: new_name #/home/g752vs/.pki#, whitelist
Debug 571: fname #/home/g752vs/.pki#, cfg.homedir #/home/g752vs#
Replaced whitelist path: whitelist /home/g752vs/.pki
Debug 456: new_name #/home/g752vs/.local/share/pki#, whitelist
Debug 571: fname #/home/g752vs/.local/share/pki#, cfg.homedir #/home/g752vs#
Replaced whitelist path: whitelist /home/g752vs/.local/share/pki
Debug 456: new_name #/home/g752vs/.XCompose#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.XCompose
	expanded: /home/g752vs/.XCompose
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.asoundrc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.asoundrc
	expanded: /home/g752vs/.asoundrc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.config/ibus#, whitelist
Debug 571: fname #/home/g752vs/.config/ibus#, cfg.homedir #/home/g752vs#
Replaced whitelist path: whitelist /home/g752vs/.config/ibus
Debug 456: new_name #/home/g752vs/.config/mimeapps.list#, whitelist
Debug 571: fname #/home/g752vs/.config/mimeapps.list#, cfg.homedir #/home/g752vs#
Replaced whitelist path: whitelist /home/g752vs/.config/mimeapps.list
Debug 456: new_name #/home/g752vs/.config/pkcs11#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/pkcs11
	expanded: /home/g752vs/.config/pkcs11
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.config/user-dirs.dirs#, whitelist
Debug 571: fname #/home/g752vs/.config/user-dirs.dirs#, cfg.homedir #/home/g752vs#
Replaced whitelist path: whitelist /home/g752vs/.config/user-dirs.dirs
Debug 456: new_name #/home/g752vs/.config/user-dirs.locale#, whitelist
Debug 571: fname #/home/g752vs/.config/user-dirs.locale#, cfg.homedir #/home/g752vs#
Replaced whitelist path: whitelist /home/g752vs/.config/user-dirs.locale
Debug 456: new_name #/home/g752vs/.drirc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.drirc
	expanded: /home/g752vs/.drirc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.icons#, whitelist
Debug 571: fname #/home/g752vs/.icons#, cfg.homedir #/home/g752vs#
Replaced whitelist path: whitelist /home/g752vs/.icons
Debug 456: new_name #/home/g752vs/.local/share/applications#, whitelist
Debug 571: fname #/home/g752vs/.local/share/applications#, cfg.homedir #/home/g752vs#
Replaced whitelist path: whitelist /home/g752vs/.local/share/applications
Debug 456: new_name #/home/g752vs/.local/share/icons#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.local/share/icons
	expanded: /home/g752vs/.local/share/icons
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.local/share/mime#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.local/share/mime
	expanded: /home/g752vs/.local/share/mime
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.mime.types#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.mime.types
	expanded: /home/g752vs/.mime.types
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.uim.d#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.uim.d
	expanded: /home/g752vs/.uim.d
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.config/dconf#, whitelist
Debug 571: fname #/home/g752vs/.config/dconf#, cfg.homedir #/home/g752vs#
Replaced whitelist path: whitelist /home/g752vs/.config/dconf
Debug 456: new_name #/home/g752vs/.cache/fontconfig#, whitelist
Debug 571: fname #/home/g752vs/.cache/fontconfig#, cfg.homedir #/home/g752vs#
Replaced whitelist path: whitelist /home/g752vs/.cache/fontconfig
Debug 456: new_name #/home/g752vs/.config/fontconfig#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/fontconfig
	expanded: /home/g752vs/.config/fontconfig
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.fontconfig#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.fontconfig
	expanded: /home/g752vs/.fontconfig
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.fonts#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.fonts
	expanded: /home/g752vs/.fonts
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.fonts.conf#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.fonts.conf
	expanded: /home/g752vs/.fonts.conf
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.fonts.conf.d#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.fonts.conf.d
	expanded: /home/g752vs/.fonts.conf.d
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.fonts.d#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.fonts.d
	expanded: /home/g752vs/.fonts.d
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.local/share/fonts#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.local/share/fonts
	expanded: /home/g752vs/.local/share/fonts
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.pangorc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.pangorc
	expanded: /home/g752vs/.pangorc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.config/gtk-2.0#, whitelist
Debug 571: fname #/home/g752vs/.config/gtk-2.0#, cfg.homedir #/home/g752vs#
Replaced whitelist path: whitelist /home/g752vs/.config/gtk-2.0
Debug 456: new_name #/home/g752vs/.config/gtk-3.0#, whitelist
Debug 571: fname #/home/g752vs/.config/gtk-3.0#, cfg.homedir #/home/g752vs#
Replaced whitelist path: whitelist /home/g752vs/.config/gtk-3.0
Debug 456: new_name #/home/g752vs/.config/gtk-4.0#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/gtk-4.0
	expanded: /home/g752vs/.config/gtk-4.0
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.config/gtkrc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/gtkrc
	expanded: /home/g752vs/.config/gtkrc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.config/gtkrc-2.0#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/gtkrc-2.0
	expanded: /home/g752vs/.config/gtkrc-2.0
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.gnome2#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.gnome2
	expanded: /home/g752vs/.gnome2
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.gnome2-private#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.gnome2-private
	expanded: /home/g752vs/.gnome2-private
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.gtk-2.0#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.gtk-2.0
	expanded: /home/g752vs/.gtk-2.0
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.gtkrc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.gtkrc
	expanded: /home/g752vs/.gtkrc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.gtkrc-2.0#, whitelist
Debug 571: fname #/home/g752vs/.gtkrc-2.0#, cfg.homedir #/home/g752vs#
Replaced whitelist path: whitelist /home/g752vs/.gtkrc-2.0
Debug 456: new_name #/home/g752vs/.kde/share/config/gtkrc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/gtkrc
	expanded: /home/g752vs/.kde/share/config/gtkrc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.kde/share/config/gtkrc-2.0#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/gtkrc-2.0
	expanded: /home/g752vs/.kde/share/config/gtkrc-2.0
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.kde4/share/config/gtkrc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/gtkrc
	expanded: /home/g752vs/.kde4/share/config/gtkrc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.kde4/share/config/gtkrc-2.0#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/gtkrc-2.0
	expanded: /home/g752vs/.kde4/share/config/gtkrc-2.0
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.local/share/themes#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.local/share/themes
	expanded: /home/g752vs/.local/share/themes
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.themes#, whitelist
Debug 571: fname #/home/g752vs/.themes#, cfg.homedir #/home/g752vs#
Replaced whitelist path: whitelist /home/g752vs/.themes
Debug 456: new_name #/home/g752vs/.cache/kioexec/krun#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.cache/kioexec/krun
	expanded: /home/g752vs/.cache/kioexec/krun
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.config/Kvantum#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/Kvantum
	expanded: /home/g752vs/.config/Kvantum
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.config/Trolltech.conf#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/Trolltech.conf
	expanded: /home/g752vs/.config/Trolltech.conf
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.config/kdeglobals#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/kdeglobals
	expanded: /home/g752vs/.config/kdeglobals
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.config/kio_httprc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/kio_httprc
	expanded: /home/g752vs/.config/kio_httprc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.config/kioslaverc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/kioslaverc
	expanded: /home/g752vs/.config/kioslaverc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.config/ksslcablacklist#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/ksslcablacklist
	expanded: /home/g752vs/.config/ksslcablacklist
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.config/qt5ct#, whitelist
Debug 571: fname #/home/g752vs/.config/qt5ct#, cfg.homedir #/home/g752vs#
Replaced whitelist path: whitelist /home/g752vs/.config/qt5ct
Debug 456: new_name #/home/g752vs/.kde/share/config/kdeglobals#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/kdeglobals
	expanded: /home/g752vs/.kde/share/config/kdeglobals
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.kde/share/config/kio_httprc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/kio_httprc
	expanded: /home/g752vs/.kde/share/config/kio_httprc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.kde/share/config/kioslaverc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/kioslaverc
	expanded: /home/g752vs/.kde/share/config/kioslaverc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.kde/share/config/ksslcablacklist#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/ksslcablacklist
	expanded: /home/g752vs/.kde/share/config/ksslcablacklist
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.kde/share/config/oxygenrc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/oxygenrc
	expanded: /home/g752vs/.kde/share/config/oxygenrc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.kde/share/icons#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/icons
	expanded: /home/g752vs/.kde/share/icons
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.kde4/share/config/kdeglobals#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/kdeglobals
	expanded: /home/g752vs/.kde4/share/config/kdeglobals
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.kde4/share/config/kio_httprc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/kio_httprc
	expanded: /home/g752vs/.kde4/share/config/kio_httprc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.kde4/share/config/kioslaverc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/kioslaverc
	expanded: /home/g752vs/.kde4/share/config/kioslaverc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.kde4/share/config/ksslcablacklist#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/ksslcablacklist
	expanded: /home/g752vs/.kde4/share/config/ksslcablacklist
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.kde4/share/config/oxygenrc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/oxygenrc
	expanded: /home/g752vs/.kde4/share/config/oxygenrc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.kde4/share/icons#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/icons
	expanded: /home/g752vs/.kde4/share/icons
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/g752vs/.local/share/qt5ct#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.local/share/qt5ct
	expanded: /home/g752vs/.local/share/qt5ct
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/var/lib/ca-certificates#, whitelist
Removed whitelist/nowhitelist path: whitelist /var/lib/ca-certificates
	expanded: /var/lib/ca-certificates
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/var/lib/dbus#, whitelist
Debug 456: new_name #/var/lib/menu-xdg#, whitelist
Removed whitelist/nowhitelist path: whitelist /var/lib/menu-xdg
	expanded: /var/lib/menu-xdg
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/var/lib/uim#, whitelist
Removed whitelist/nowhitelist path: whitelist /var/lib/uim
	expanded: /var/lib/uim
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/var/cache/fontconfig#, whitelist
Debug 456: new_name #/var/tmp#, whitelist
Debug 456: new_name #/var/run#, whitelist
Replaced whitelist path: whitelist /run
Debug 456: new_name #/var/lock#, whitelist
Replaced whitelist path: whitelist /run/lock
Mounting tmpfs on /var directory
Drop privileges: pid 2, uid 1000, gid 1000, nogroups 0
Mounting a new /root directory
Mounting a new /home directory
Create a new user directory
Drop privileges: pid 3, uid 1000, gid 1000, nogroups 0
Drop privileges: pid 4, uid 1000, gid 1000, nogroups 0
Whitelisting /var/opt/vivaldi
885 881 259:8 /var/opt/vivaldi /var/opt/vivaldi rw,relatime master:1 - ext4 /dev/nvme0n1p3 rw,errors=remount-ro
mountid=885 fsname=/var/opt/vivaldi dir=/var/opt/vivaldi fstype=ext4
Whitelisting /home/g752vs/.cache/vivaldi
886 884 259:9 /g752vs/.cache/vivaldi /home/g752vs/.cache/vivaldi rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=886 fsname=/g752vs/.cache/vivaldi dir=/home/g752vs/.cache/vivaldi fstype=ext4
Whitelisting /home/g752vs/.config/vivaldi
887 884 259:9 /g752vs/.config/vivaldi /home/g752vs/.config/vivaldi rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=887 fsname=/g752vs/.config/vivaldi dir=/home/g752vs/.config/vivaldi fstype=ext4
Whitelisting /home/g752vs/.local/lib/vivaldi
888 884 259:9 /g752vs/.local/lib/vivaldi /home/g752vs/.local/lib/vivaldi rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=888 fsname=/g752vs/.local/lib/vivaldi dir=/home/g752vs/.local/lib/vivaldi fstype=ext4
Whitelisting /home/g752vs/Downloads
889 884 259:9 /g752vs/Downloads /home/g752vs/Downloads rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=889 fsname=/g752vs/Downloads dir=/home/g752vs/Downloads fstype=ext4
Whitelisting /home/g752vs/.pki
890 884 259:9 /g752vs/.pki /home/g752vs/.pki rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=890 fsname=/g752vs/.pki dir=/home/g752vs/.pki fstype=ext4
Whitelisting /home/g752vs/.local/share/pki
891 884 259:9 /g752vs/.local/share/pki /home/g752vs/.local/share/pki rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=891 fsname=/g752vs/.local/share/pki dir=/home/g752vs/.local/share/pki fstype=ext4
Whitelisting /home/g752vs/.config/ibus
892 884 259:9 /g752vs/.config/ibus /home/g752vs/.config/ibus rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=892 fsname=/g752vs/.config/ibus dir=/home/g752vs/.config/ibus fstype=ext4
Whitelisting /home/g752vs/.config/mimeapps.list
893 884 259:9 /g752vs/.config/mimeapps.list /home/g752vs/.config/mimeapps.list rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=893 fsname=/g752vs/.config/mimeapps.list dir=/home/g752vs/.config/mimeapps.list fstype=ext4
Whitelisting /home/g752vs/.config/user-dirs.dirs
894 884 259:9 /g752vs/.config/user-dirs.dirs /home/g752vs/.config/user-dirs.dirs rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=894 fsname=/g752vs/.config/user-dirs.dirs dir=/home/g752vs/.config/user-dirs.dirs fstype=ext4
Whitelisting /home/g752vs/.config/user-dirs.locale
895 884 259:9 /g752vs/.config/user-dirs.locale /home/g752vs/.config/user-dirs.locale rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=895 fsname=/g752vs/.config/user-dirs.locale dir=/home/g752vs/.config/user-dirs.locale fstype=ext4
Whitelisting /home/g752vs/.icons
896 884 259:9 /g752vs/.icons /home/g752vs/.icons rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=896 fsname=/g752vs/.icons dir=/home/g752vs/.icons fstype=ext4
Whitelisting /home/g752vs/.local/share/applications
897 884 259:9 /g752vs/.local/share/applications /home/g752vs/.local/share/applications rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=897 fsname=/g752vs/.local/share/applications dir=/home/g752vs/.local/share/applications fstype=ext4
Whitelisting /home/g752vs/.config/dconf
898 884 259:9 /g752vs/.config/dconf /home/g752vs/.config/dconf rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=898 fsname=/g752vs/.config/dconf dir=/home/g752vs/.config/dconf fstype=ext4
Whitelisting /home/g752vs/.cache/fontconfig
899 884 259:9 /g752vs/.cache/fontconfig /home/g752vs/.cache/fontconfig rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=899 fsname=/g752vs/.cache/fontconfig dir=/home/g752vs/.cache/fontconfig fstype=ext4
Whitelisting /home/g752vs/.config/gtk-2.0
900 884 259:9 /g752vs/.config/gtk-2.0 /home/g752vs/.config/gtk-2.0 rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=900 fsname=/g752vs/.config/gtk-2.0 dir=/home/g752vs/.config/gtk-2.0 fstype=ext4
Whitelisting /home/g752vs/.config/gtk-3.0
901 884 259:9 /g752vs/.config/gtk-3.0 /home/g752vs/.config/gtk-3.0 rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=901 fsname=/g752vs/.config/gtk-3.0 dir=/home/g752vs/.config/gtk-3.0 fstype=ext4
Whitelisting /home/g752vs/.gtkrc-2.0
902 884 259:9 /g752vs/.gtkrc-2.0 /home/g752vs/.gtkrc-2.0 rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=902 fsname=/g752vs/.gtkrc-2.0 dir=/home/g752vs/.gtkrc-2.0 fstype=ext4
Whitelisting /home/g752vs/.themes
903 884 259:9 /g752vs/.themes /home/g752vs/.themes rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=903 fsname=/g752vs/.themes dir=/home/g752vs/.themes fstype=ext4
Whitelisting /home/g752vs/.config/qt5ct
904 884 259:9 /g752vs/.config/qt5ct /home/g752vs/.config/qt5ct rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=904 fsname=/g752vs/.config/qt5ct dir=/home/g752vs/.config/qt5ct fstype=ext4
Whitelisting /var/lib/dbus
905 881 259:8 /var/lib/dbus /var/lib/dbus rw,relatime master:1 - ext4 /dev/nvme0n1p3 rw,errors=remount-ro
mountid=905 fsname=/var/lib/dbus dir=/var/lib/dbus fstype=ext4
Whitelisting /var/cache/fontconfig
906 881 259:8 /var/cache/fontconfig /var/cache/fontconfig rw,relatime master:1 - ext4 /dev/nvme0n1p3 rw,errors=remount-ro
mountid=906 fsname=/var/cache/fontconfig dir=/var/cache/fontconfig fstype=ext4
Whitelisting /var/tmp
907 881 0:53 / /var/tmp rw,nosuid,nodev,noexec - tmpfs tmpfs rw
mountid=907 fsname=/ dir=/var/tmp fstype=tmpfs
Created symbolic link /var/run -> /run
Created symbolic link /var/lock -> /run/lock
Disable /etc/X11/Xsession.d
Disable /etc/xdg/autostart
Mounting read-only /home/g752vs/.Xauthority
912 884 0:66 /g752vs/.Xauthority /home/g752vs/.Xauthority ro,nosuid,nodev,noexec - tmpfs tmpfs rw,mode=755
mountid=912 fsname=/g752vs/.Xauthority dir=/home/g752vs/.Xauthority fstype=tmpfs
Mounting read-only /home/g752vs/.config/dconf
913 898 259:9 /g752vs/.config/dconf /home/g752vs/.config/dconf ro,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=913 fsname=/g752vs/.config/dconf dir=/home/g752vs/.config/dconf fstype=ext4
Disable /usr/bin/systemd-run
Disable /run/user/1000/systemd
Disable /etc/init.d (requested /etc/init.d/)
Not blacklist /var/opt
Disable /run/acpid.socket (requested /var/run/acpid.socket)
Disable /etc/anacrontab
Disable /etc/cron.daily
Disable /etc/crontab
Disable /etc/cron.monthly
Disable /etc/cron.weekly
Disable /etc/cron.d
Disable /etc/cron.hourly
Disable /etc/profile.d
Disable /etc/rcS.d
Disable /etc/rc3.d
Disable /etc/rc2.d
Disable /etc/rc4.d
Disable /etc/rc0.d
Disable /etc/rc6.d
Disable /etc/rc5.d
Disable /etc/rc1.d
Disable /etc/kernel
Disable /etc/kernel-img.conf
Disable /etc/grub.d
Disable /etc/dkms
Disable /etc/apparmor
Disable /etc/apparmor.d
Disable /etc/selinux
Disable /etc/modules
Disable /etc/modules-load.d
Disable /etc/logrotate.d
Disable /etc/logrotate.conf
Disable /etc/adduser.conf
Mounting read-only /home/g752vs/.bashrc
946 884 0:66 /g752vs/.bashrc /home/g752vs/.bashrc ro,nosuid,nodev,noexec - tmpfs tmpfs rw,mode=755
mountid=946 fsname=/g752vs/.bashrc dir=/home/g752vs/.bashrc fstype=tmpfs
Mounting read-only /home/g752vs/.local/share/applications
947 897 259:9 /g752vs/.local/share/applications /home/g752vs/.local/share/applications ro,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=947 fsname=/g752vs/.local/share/applications dir=/home/g752vs/.local/share/applications fstype=ext4
Mounting read-only /home/g752vs/.config/mimeapps.list
948 893 259:9 /g752vs/.config/mimeapps.list /home/g752vs/.config/mimeapps.list ro,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=948 fsname=/g752vs/.config/mimeapps.list dir=/home/g752vs/.config/mimeapps.list fstype=ext4
Mounting read-only /home/g752vs/.config/user-dirs.dirs
949 894 259:9 /g752vs/.config/user-dirs.dirs /home/g752vs/.config/user-dirs.dirs ro,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=949 fsname=/g752vs/.config/user-dirs.dirs dir=/home/g752vs/.config/user-dirs.dirs fstype=ext4
Mounting read-only /home/g752vs/.config/user-dirs.locale
950 895 259:9 /g752vs/.config/user-dirs.locale /home/g752vs/.config/user-dirs.locale ro,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=950 fsname=/g752vs/.config/user-dirs.locale dir=/home/g752vs/.config/user-dirs.locale fstype=ext4
Not blacklist /home/g752vs/.pki
Not blacklist /home/g752vs/.local/share/pki
Disable /etc/group-
Disable /etc/gshadow
Disable /etc/gshadow-
Disable /etc/passwd-
Disable /etc/shadow
Disable /etc/shadow-
Disable /etc/ssh
Disable /sbin
Disable /usr/local/sbin
Disable /usr/sbin
Disable /bin/busybox
Disable /usr/bin/chage
Disable /usr/bin/chfn
Disable /usr/bin/chsh
Disable /usr/bin/crontab
Disable /usr/bin/expiry
Disable /bin/fusermount
Disable /usr/bin/gpasswd
Disable /bin/mount
Disable /bin/nc.openbsd (requested /bin/nc)
Disable /usr/bin/newgrp
Disable /bin/ntfs-3g
Disable /usr/bin/pkexec
Disable /usr/bin/newgrp (requested /usr/bin/sg)
Disable /usr/bin/strace
Disable /bin/su
Disable /usr/bin/sudo
Disable /bin/umount
Disable /usr/bin/xev
Disable /usr/bin/xinput
Disable /usr/bin/gnome-terminal
Disable /usr/bin/gnome-terminal.wrapper
Debug: no access to file /run/user/1000/doc, forcing mount
Disable /run/user/1000/doc
Disable /usr/share/flatpak
Disable /usr/bin/bwrap
Disable /usr/bin/dig
Disable /usr/bin/nslookup
Disable /usr/bin/host
Disable /usr/bin/resolvectl
Disable /usr/bin/x86_64-linux-gnu-as (requested /usr/bin/as)
Disable /usr/bin/x86_64-linux-gnu-gcc-8 (requested /usr/bin/cc)
Disable /usr/bin/x86_64-linux-gnu-g++-8 (requested /usr/bin/c++)
Disable /usr/bin/x86_64-linux-gnu-c++filt (requested /usr/bin/c++filt)
Disable /usr/bin/c89-gcc
Disable /usr/bin/c89-gcc (requested /usr/bin/c89)
Disable /usr/bin/c99-gcc (requested /usr/bin/c99)
Disable /usr/bin/c99-gcc
Disable /usr/bin/x86_64-linux-gnu-cpp-8 (requested /usr/bin/cpp-8)
Disable /usr/bin/x86_64-linux-gnu-cpp-6 (requested /usr/bin/cpp-6)
Disable /usr/bin/x86_64-linux-gnu-cpp-8 (requested /usr/bin/cpp)
Disable /usr/bin/x86_64-linux-gnu-g++-6 (requested /usr/bin/g++-6)
Disable /usr/bin/x86_64-linux-gnu-g++-8 (requested /usr/bin/g++)
Disable /usr/bin/x86_64-linux-gnu-g++-8 (requested /usr/bin/g++-8)
Disable /usr/bin/x86_64-linux-gnu-gcc-nm-8 (requested /usr/bin/gcc-nm-8)
Disable /usr/bin/x86_64-linux-gnu-gcc-8 (requested /usr/bin/gcc-8)
Disable /usr/bin/x86_64-linux-gnu-gcc-ranlib-8 (requested /usr/bin/gcc-ranlib)
Disable /usr/bin/x86_64-linux-gnu-gcc-ranlib-6 (requested /usr/bin/gcc-ranlib-6)
Disable /usr/bin/x86_64-linux-gnu-gcc-nm-8 (requested /usr/bin/gcc-nm)
Disable /usr/bin/x86_64-linux-gnu-gcc-nm-6 (requested /usr/bin/gcc-nm-6)
Disable /usr/bin/x86_64-linux-gnu-gcc-ar-8 (requested /usr/bin/gcc-ar)
Disable /usr/bin/x86_64-linux-gnu-gcc-ar-8 (requested /usr/bin/gcc-ar-8)
Disable /usr/bin/x86_64-linux-gnu-gcc-8 (requested /usr/bin/gcc)
Disable /usr/bin/x86_64-linux-gnu-gcc-ranlib-8 (requested /usr/bin/gcc-ranlib-8)
Disable /usr/bin/x86_64-linux-gnu-gcc-ar-6 (requested /usr/bin/gcc-ar-6)
Disable /usr/bin/x86_64-linux-gnu-gcc-6 (requested /usr/bin/gcc-6)
Disable /usr/bin/gdb
Disable /usr/bin/x86_64-linux-gnu-ld.bfd (requested /usr/bin/ld)
Disable /usr/bin/x86_64-linux-gnu-gcc-ar-6
Disable /usr/bin/x86_64-linux-gnu-gcc-8
Disable /usr/bin/x86_64-linux-gnu-gcc-nm-6
Disable /usr/bin/x86_64-linux-gnu-gcc-6
Disable /usr/bin/x86_64-linux-gnu-gcc-ranlib-6
Disable /usr/bin/x86_64-linux-gnu-gcc-8 (requested /usr/bin/x86_64-linux-gnu-gcc)
Disable /usr/bin/x86_64-linux-gnu-gcc-nm-8 (requested /usr/bin/x86_64-linux-gnu-gcc-nm)
Disable /usr/bin/c89-gcc
Disable /usr/bin/x86_64-linux-gnu-gcc-ranlib-8 (requested /usr/bin/x86_64-linux-gnu-gcc-ranlib)
Disable /usr/bin/x86_64-linux-gnu-gcc-ranlib-8
Disable /usr/bin/x86_64-linux-gnu-gcc-nm-8
Disable /usr/bin/x86_64-linux-gnu-gcc-ar-8
Disable /usr/bin/x86_64-linux-gnu-gcc-ar-8 (requested /usr/bin/x86_64-linux-gnu-gcc-ar)
Disable /usr/bin/c99-gcc
Disable /usr/bin/x86_64-linux-gnu-g++-8 (requested /usr/bin/x86_64-linux-gnu-g++)
Disable /usr/bin/x86_64-linux-gnu-g++-6
Disable /usr/bin/x86_64-linux-gnu-g++-8
Disable /usr/bin/x86_64-linux-gnu-gcc-ar-6
Disable /usr/bin/x86_64-linux-gnu-gcc-8
Disable /usr/bin/x86_64-linux-gnu-gcc-nm-6
Disable /usr/bin/x86_64-linux-gnu-gcc-6
Disable /usr/bin/x86_64-linux-gnu-gcc-ranlib-6
Disable /usr/bin/x86_64-linux-gnu-gcc-8 (requested /usr/bin/x86_64-linux-gnu-gcc)
Disable /usr/bin/x86_64-linux-gnu-gcc-nm-8 (requested /usr/bin/x86_64-linux-gnu-gcc-nm)
Disable /usr/bin/c89-gcc
Disable /usr/bin/x86_64-linux-gnu-gcc-ranlib-8 (requested /usr/bin/x86_64-linux-gnu-gcc-ranlib)
Disable /usr/bin/x86_64-linux-gnu-gcc-ranlib-8
Disable /usr/bin/x86_64-linux-gnu-gcc-nm-8
Disable /usr/bin/x86_64-linux-gnu-gcc-ar-8
Disable /usr/bin/x86_64-linux-gnu-gcc-ar-8 (requested /usr/bin/x86_64-linux-gnu-gcc-ar)
Disable /usr/bin/c99-gcc
Disable /usr/bin/x86_64-linux-gnu-g++-8 (requested /usr/bin/x86_64-linux-gnu-g++)
Disable /usr/bin/x86_64-linux-gnu-g++-6
Disable /usr/bin/x86_64-linux-gnu-g++-8
Disable /usr/lib/jvm/java-11-openjdk-amd64/bin/java (requested /usr/bin/java)
Disable /usr/share/java
Disable /usr/bin/openssl
Disable /usr/lib/valgrind
Disable /usr/src
Disable /usr/local/src
Disable /usr/include
Disable /usr/local/include
Mounting noexec /home/g752vs/.cache/vivaldi
1060 886 259:9 /g752vs/.cache/vivaldi /home/g752vs/.cache/vivaldi rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=1060 fsname=/g752vs/.cache/vivaldi dir=/home/g752vs/.cache/vivaldi fstype=ext4
Mounting noexec /home/g752vs/.config/vivaldi
1061 887 259:9 /g752vs/.config/vivaldi /home/g752vs/.config/vivaldi rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=1061 fsname=/g752vs/.config/vivaldi dir=/home/g752vs/.config/vivaldi fstype=ext4
Mounting noexec /home/g752vs/.local/lib/vivaldi
1062 888 259:9 /g752vs/.local/lib/vivaldi /home/g752vs/.local/lib/vivaldi rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=1062 fsname=/g752vs/.local/lib/vivaldi dir=/home/g752vs/.local/lib/vivaldi fstype=ext4
Mounting noexec /home/g752vs/Downloads
1063 889 259:9 /g752vs/Downloads /home/g752vs/Downloads rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=1063 fsname=/g752vs/Downloads dir=/home/g752vs/Downloads fstype=ext4
Mounting noexec /home/g752vs/.pki
1064 890 259:9 /g752vs/.pki /home/g752vs/.pki rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=1064 fsname=/g752vs/.pki dir=/home/g752vs/.pki fstype=ext4
Mounting noexec /home/g752vs/.local/share/pki
1065 891 259:9 /g752vs/.local/share/pki /home/g752vs/.local/share/pki rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=1065 fsname=/g752vs/.local/share/pki dir=/home/g752vs/.local/share/pki fstype=ext4
Mounting noexec /home/g752vs/.config/ibus
1066 892 259:9 /g752vs/.config/ibus /home/g752vs/.config/ibus rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=1066 fsname=/g752vs/.config/ibus dir=/home/g752vs/.config/ibus fstype=ext4
Mounting noexec /home/g752vs/.config/mimeapps.list
1067 948 259:9 /g752vs/.config/mimeapps.list /home/g752vs/.config/mimeapps.list ro,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=1067 fsname=/g752vs/.config/mimeapps.list dir=/home/g752vs/.config/mimeapps.list fstype=ext4
Mounting noexec /home/g752vs/.config/user-dirs.dirs
1068 949 259:9 /g752vs/.config/user-dirs.dirs /home/g752vs/.config/user-dirs.dirs ro,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=1068 fsname=/g752vs/.config/user-dirs.dirs dir=/home/g752vs/.config/user-dirs.dirs fstype=ext4
Mounting noexec /home/g752vs/.config/user-dirs.locale
1069 950 259:9 /g752vs/.config/user-dirs.locale /home/g752vs/.config/user-dirs.locale ro,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=1069 fsname=/g752vs/.config/user-dirs.locale dir=/home/g752vs/.config/user-dirs.locale fstype=ext4
Mounting noexec /home/g752vs/.icons
1070 896 259:9 /g752vs/.icons /home/g752vs/.icons rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=1070 fsname=/g752vs/.icons dir=/home/g752vs/.icons fstype=ext4
Mounting noexec /home/g752vs/.local/share/applications
1071 947 259:9 /g752vs/.local/share/applications /home/g752vs/.local/share/applications ro,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=1071 fsname=/g752vs/.local/share/applications dir=/home/g752vs/.local/share/applications fstype=ext4
Mounting noexec /home/g752vs/.config/dconf
1072 913 259:9 /g752vs/.config/dconf /home/g752vs/.config/dconf ro,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=1072 fsname=/g752vs/.config/dconf dir=/home/g752vs/.config/dconf fstype=ext4
Mounting noexec /home/g752vs/.cache/fontconfig
1073 899 259:9 /g752vs/.cache/fontconfig /home/g752vs/.cache/fontconfig rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=1073 fsname=/g752vs/.cache/fontconfig dir=/home/g752vs/.cache/fontconfig fstype=ext4
Mounting noexec /home/g752vs/.config/gtk-2.0
1074 900 259:9 /g752vs/.config/gtk-2.0 /home/g752vs/.config/gtk-2.0 rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=1074 fsname=/g752vs/.config/gtk-2.0 dir=/home/g752vs/.config/gtk-2.0 fstype=ext4
Mounting noexec /home/g752vs/.config/gtk-3.0
1075 901 259:9 /g752vs/.config/gtk-3.0 /home/g752vs/.config/gtk-3.0 rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=1075 fsname=/g752vs/.config/gtk-3.0 dir=/home/g752vs/.config/gtk-3.0 fstype=ext4
Mounting noexec /home/g752vs/.gtkrc-2.0
1076 902 259:9 /g752vs/.gtkrc-2.0 /home/g752vs/.gtkrc-2.0 rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=1076 fsname=/g752vs/.gtkrc-2.0 dir=/home/g752vs/.gtkrc-2.0 fstype=ext4
Mounting noexec /home/g752vs/.themes
1077 903 259:9 /g752vs/.themes /home/g752vs/.themes rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=1077 fsname=/g752vs/.themes dir=/home/g752vs/.themes fstype=ext4
Mounting noexec /home/g752vs/.config/qt5ct
1078 904 259:9 /g752vs/.config/qt5ct /home/g752vs/.config/qt5ct rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro
mountid=1078 fsname=/g752vs/.config/qt5ct dir=/home/g752vs/.config/qt5ct fstype=ext4
Mounting noexec /run/user/1000
1085 1084 0:23 /firejail/firejail.ro.dir /run/user/1000/systemd rw,nosuid,noexec,relatime master:5 - tmpfs tmpfs rw,size=1640148k,mode=755
mountid=1085 fsname=/firejail/firejail.ro.dir dir=/run/user/1000/systemd fstype=tmpfs
Warning: not remounting /run/user/1000/gvfs
Mounting noexec /run/user/1000/doc
1086 1082 0:23 /firejail/firejail.ro.dir /run/user/1000/doc rw,nosuid,nodev,noexec,relatime master:5 - tmpfs tmpfs rw,size=1640148k,mode=755
mountid=1086 fsname=/firejail/firejail.ro.dir dir=/run/user/1000/doc fstype=tmpfs
Mounting noexec /dev/shm
1087 858 0:62 /shm /dev/shm rw,nosuid,nodev,noexec - tmpfs tmpfs rw,mode=755
mountid=1087 fsname=/shm dir=/dev/shm fstype=tmpfs
Mounting noexec /tmp
1088 627 259:8 /tmp /tmp rw,nosuid,nodev,noexec,relatime master:1 - ext4 /dev/nvme0n1p3 rw,errors=remount-ro
mountid=1088 fsname=/tmp dir=/tmp fstype=ext4
Disable /usr/share/lua
Disable /usr/bin/cpan5.24-x86_64-linux-gnu
Disable /usr/bin/cpan5.28-x86_64-linux-gnu
Disable /usr/bin/cpan
Disable /usr/bin/perl
Disable /usr/share/perl
Disable /usr/share/perl-openssl-defaults
Disable /usr/share/perl5
Disable /usr/bin/python2.7 (requested /usr/bin/python2)
Disable /usr/bin/python2.7
Disable /usr/lib/python2.7
Disable /usr/local/lib/python2.7
Disable /usr/bin/python3.5
Disable /usr/bin/python3.7
Disable /usr/bin/python3.7m (requested /usr/bin/python3m)
Disable /usr/bin/python3.7 (requested /usr/bin/python3)
Disable /usr/bin/python3.5m
Disable /usr/bin/python3.7m
Disable /usr/lib/python3.5
Disable /usr/lib/python3.7
Disable /usr/lib/python3
Disable /usr/local/lib/python3.5
Disable /usr/local/lib/python3.7
Disable /usr/share/python3
Not blacklist /home/g752vs/.config/vivaldi
Not blacklist /home/g752vs/.local/lib/vivaldi
Disable /tmp/ssh-CpmVQPU52orj
Not blacklist /home/g752vs/.cache/vivaldi
Disable /sys/fs
Disable /sys/module
Disable /mnt
Disable /media
Disable /run/mount
Mounting noexec /run/firejail/mnt/pulse
1119 728 0:47 /pulse /run/firejail/mnt/pulse rw,nosuid,nodev,noexec - tmpfs tmpfs rw,mode=755
mountid=1119 fsname=/pulse dir=/run/firejail/mnt/pulse fstype=tmpfs
Creating empty /home/g752vs/.config/pulse directory
Drop privileges: pid 5, uid 1000, gid 1000, nogroups 0
Mounting /run/firejail/mnt/pulse on /home/g752vs/.config/pulse
1120 884 0:47 /pulse /home/g752vs/.config/pulse rw,nosuid,nodev,noexec - tmpfs tmpfs rw,mode=755
mountid=1120 fsname=/pulse dir=/home/g752vs/.config/pulse fstype=tmpfs
Current directory: /home/g752vs
DISPLAY=:0 parsed as 0
Mounting read-only /run/firejail/mnt/seccomp
1122 728 0:47 /seccomp /run/firejail/mnt/seccomp ro,nosuid - tmpfs tmpfs rw,mode=755
mountid=1122 fsname=/seccomp dir=/run/firejail/mnt/seccomp fstype=tmpfs
Seccomp directory:
ls /run/firejail/mnt/seccomp
drwxr-xr-x root     root             120 .
drwxr-xr-x root     root             300 ..
-rw-r--r-- g752vs   g752vs          1072 seccomp
-rw-r--r-- g752vs   g752vs           808 seccomp.32
-rw-r--r-- g752vs   g752vs             0 seccomp.postexec
-rw-r--r-- g752vs   g752vs             0 seccomp.postexec32
No active seccomp files
Set caps filter 240000
Drop privileges: pid 1, uid 1000, gid 1000, nogroups 1
No supplementary groups
starting application
LD_PRELOAD=(null)
execvp argument 0: vivaldi
Child process initialized in 69.94 ms
Searching $PATH for vivaldi
trying #/usr/local/bin/vivaldi#
trying #/usr/bin/vivaldi#
monitoring pid 6

[6:6:0926/113333.910906:ERROR:chrome_content_client.cc(346)] Failed to locate and load the component updated flash plugin.
[6:43:0926/113333.948156:ERROR:database.cc(1584)] Calendar sqlite error 1, errno 0: no such column: etag, sql: update events set etag = ''
[6:43:0926/113333.948186:ERROR:calendar_database.cc(47)] Calendar DB failed to migrate from version 1. Calendar API will be disabled.
[6:43:0926/113333.955218:ERROR:calendar_backend.cc(158)] INIT_TOO_NEW
[6:6:0926/113333.980777:ERROR:browser_switcher_service.cc(238)] XXX Init()
[6:6:0926/113335.979637:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.979694:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.979740:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.979784:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.979878:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.979925:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.979970:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.980016:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.980058:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.980100:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.980142:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.980186:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.980229:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.980285:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.980341:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.980385:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.980429:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.980470:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.980512:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.980555:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.980599:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.980638:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.983789:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.983848:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.983890:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.983932:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.983970:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984014:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984055:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984095:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984126:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984234:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984281:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984320:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984373:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984416:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984457:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984498:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984537:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984568:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984600:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984632:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984671:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984707:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984741:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984784:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984828:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984873:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984909:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984946:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.984988:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.985024:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.985062:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.985100:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.985138:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.985177:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.985221:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.986764:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.986821:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.986859:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.986894:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.986933:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.986965:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
[6:6:0926/113335.987001:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0)
Fontconfig error: Cannot load default config file: No such file: (null)
Fontconfig error: Cannot load default config file: No such file: (null)
[729:469:0926/113437.145634:ERROR:cdm_module.cc(135)] CDM at /home/g752vs/.config/vivaldi/WidevineCdm/4.10.1610.0/_platform_specific/linux_x64/libwidevinecdm.so could not be loaded.
[729:469:0926/113437.145752:ERROR:cdm_module.cc(136)] Error: /home/g752vs/.config/vivaldi/WidevineCdm/4.10.1610.0/_platform_specific/linux_x64/libwidevinecdm.so: cannot open shared object file: Operation not permitted
OUTPUT OF `firejail firefox`
g752vs@g752vs:~$ firejail firefox
Reading profile /usr/local/etc/firejail/firefox.profile
Reading profile /usr/local/etc/firejail/whitelist-usr-share-common.inc
Reading profile /usr/local/etc/firejail/firefox-common.profile
Reading profile /usr/local/etc/firejail/disable-common.inc
Reading profile /usr/local/etc/firejail/disable-devel.inc
Reading profile /usr/local/etc/firejail/disable-exec.inc
Reading profile /usr/local/etc/firejail/disable-interpreters.inc
Reading profile /usr/local/etc/firejail/disable-programs.inc
Reading profile /usr/local/etc/firejail/whitelist-common.inc
Reading profile /usr/local/etc/firejail/whitelist-var-common.inc
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Parent pid 20214, child pid 20217
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Warning: not remounting /run/user/1000/gvfs
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Child process initialized in 80.74 ms
###!!! [Parent][MessageChannel::Call] Error: Channel error: cannot send/recv
###!!! [Parent][MessageChannel::Call] Error: Channel error: cannot send/recv
###!!! [Parent][MessageChannel::Call] Error: Channel error: cannot send/recv
###!!! [Parent][MessageChannel::Call] Error: Channel error: cannot send/recv
###!!! [Parent][MessageChannel::Call] Error: Channel error: cannot send/recv
###!!! [Parent][MessageChannel::Call] Error: Channel error: cannot send/recv
###!!! [Parent][MessageChannel::Call] Error: Channel error: cannot send/recv`
Originally created by @aberja on GitHub (Sep 26, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3645 Shows and movies on **ctv.ca** and **globaltv.com** will not run with firejail using Vivaldi or Firefox. I have no issue watching them in Vivaldi and Firefox if I start the browsers outside of firejail. **Bug and expected behavior** Using Vivaldi: - On ctv.ca the ads run but when the show is to start I receive an Error Code 246000 - On globaltv.com the ads run and then when the show is to start, I receive a message that DRM is not supported. Using Firefox: With both ctv.ca and globaltv.com I receive a message "The WidevineCdm plugin has crashed when I try to start a show. The advertising continues to play, but not the show. On ctv.ca I see error code 246000. - reloading the page and restarting the browser does not start WidevineCdm from crashing.not supported" and a message that "The WidevineCdm plugin has crashed" **No profile or disabling firejail** - What changed calling `firejail --noprofile vivaldi` in a shell? Nothing changed, same issue as described above - What changed calling the program *by path*=without firejail (check `whereis PROGRAM`, `firejail --list`, `stat $programpath`)? I can watch the shows on ctv.ca and globaltv.com if I start the programs without firejail `g752vs@g752vs:~$ firefox` (throws no errors) `g752vs@g752vs:~$ vivaldi` (throws numerous errors, but I can still watch the shows) <details><summary>Example of some of the errors referred to above:</summary> ``` g752vs@g752vs:~$ vivaldi [18727:18727:0926/115003.287771:ERROR:chrome_content_client.cc(346)] Failed to locate and load the component updated flash plugin. [18727:18763:0926/115003.326000:ERROR:database.cc(1584)] Calendar sqlite error 1, errno 0: no such column: etag, sql: update events set etag = '' [18727:18763:0926/115003.326020:ERROR:calendar_database.cc(47)] Calendar DB failed to migrate from version 1. Calendar API will be disabled. [18727:18763:0926/115003.335133:ERROR:calendar_backend.cc(158)] INIT_TOO_NEW [18727:18727:0926/115003.356757:ERROR:browser_switcher_service.cc(238)] XXX Init() [18727:18727:0926/115005.261905:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [18727:18727:0926/115005.262026:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [18727:18727:0926/115005.262090:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) ``` </details> **Reproduce** Steps to reproduce the behavior: 1. Run in bash `firejail vivaldi` or 'firejail firefox' <details><summary>2. I see numerous error messages, but perhaps the relevant one with vivaldi is:</summary> ``` [729:469:0926/113437.145634:ERROR:cdm_module.cc(135)] CDM at /home/g752vs/.config/vivaldi/WidevineCdm/4.10.1610.0/_platform_specific/linux_x64/libwidevinecdm.so could not be loaded. [729:469:0926/113437.145752:ERROR:cdm_module.cc(136)] Error: /home/g752vs/.config/vivaldi/WidevineCdm/4.10.1610.0/_platform_specific/linux_x64/libwidevinecdm.so: cannot open shared object file: Operation not permitted ``` </details> **Environment** - Linux Mint LMDE 4 with Kernel Linux ```5.7.0-0.bpo.2-amd64 #1 SMP Debian 5.7.10-1~bpo10+1 (2020-07-30) x86_64 GNU/Linux``` - Firejail version 0.9.63 (updated today via github) - Vivaldi version 3.0.1874.38 (Stable channel) (64-bit) - Firefox version 78.3.0esr (64-bit) - All Add-ons / extensions were disabled in vivaldi and firefox - Browser level tracking protection was also turned off. <details><summary>OUTPUT OF `firejail --noprofile vivaldi`</summary> ``` g752vs@g752vs:~$ firejail --noprofile vivaldi Parent pid 15353, child pid 15354 Child process initialized in 8.13 ms ERROR: ld.so: object '/var/opt/vivaldi/media-codecs-80.0.3987.149/libffmpeg.so' from LD_PRELOAD cannot be preloaded (failed to map segment from shared object): ignored. ERROR: ld.so: object '/var/opt/vivaldi/media-codecs-80.0.3987.149/libffmpeg.so' from LD_PRELOAD cannot be preloaded (failed to map segment from shared object): ignored. ERROR: ld.so: object '/var/opt/vivaldi/media-codecs-80.0.3987.149/libffmpeg.so' from LD_PRELOAD cannot be preloaded (failed to map segment from shared object): ignored. ERROR: ld.so: object '/var/opt/vivaldi/media-codecs-80.0.3987.149/libffmpeg.so' from LD_PRELOAD cannot be preloaded (failed to map segment from shared object): ignored. ERROR: ld.so: object '/var/opt/vivaldi/media-codecs-80.0.3987.149/libffmpeg.so' from LD_PRELOAD cannot be preloaded (failed to map segment from shared object): ignored. [2:2:0926/113035.667171:ERROR:chrome_content_client.cc(346)] Failed to locate and load the component updated flash plugin. ERROR: ld.so: object '/var/opt/vivaldi/media-codecs-80.0.3987.149/libffmpeg.so' from LD_PRELOAD cannot be preloaded (failed to map segment from shared object): ignored. ERROR: ld.so: object '/var/opt/vivaldi/media-codecs-80.0.3987.149/libffmpeg.so' from LD_PRELOAD cannot be preloaded (failed to map segment from shared object): ignored. [2:37:0926/113035.694877:ERROR:database.cc(1584)] Calendar sqlite error 1, errno 0: no such column: etag, sql: update events set etag = '' [2:37:0926/113035.694904:ERROR:calendar_database.cc(47)] Calendar DB failed to migrate from version 1. Calendar API will be disabled. [2:37:0926/113035.702436:ERROR:calendar_backend.cc(158)] INIT_TOO_NEW [2:2:0926/113035.727378:ERROR:browser_switcher_service.cc(238)] XXX Init() [2:2:0926/113035.991486:ERROR:CONSOLE(14)] "Uncaught (in promise) TypeError: Cannot set property 'hidden' of null", source: chrome://version/version.js (14) [2:2:0926/113037.552727:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.552825:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.552872:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.552904:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.552953:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.552982:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.553014:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.553046:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.553077:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.553109:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.553140:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.553173:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.553204:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.553235:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.553264:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.553399:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.553437:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.553543:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.553573:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.553603:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.553636:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.553668:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.553700:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.553793:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.553995:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.554260:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.554575:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.554748:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.554788:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.554912:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.554949:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.554982:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.555016:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.555051:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.555085:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.555120:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.555154:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.555188:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.555223:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.555257:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.555291:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.555326:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.555361:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.555396:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.555432:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.555468:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.555504:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.555539:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.555696:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.555732:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.555768:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.555934:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.556022:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.556105:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.556314:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.556352:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.556956:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.557664:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.558128:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.558240:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.558358:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.558505:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.558629:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [2:2:0926/113037.558900:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) ERROR: ld.so: object '/var/opt/vivaldi/media-codecs-80.0.3987.149/libffmpeg.so' from LD_PRELOAD cannot be preloaded (failed to map segment from shared object): ignored. Fontconfig error: Cannot load default config file: No such file: (null) Fontconfig error: Cannot load default config file: No such file: (null) [534:465:0926/113047.320937:ERROR:batching_media_log.cc(38)] MediaEvent: {"error":"video decoder initialization failed"} [534:349:0926/113047.329717:ERROR:batching_media_log.cc(35)] MediaEvent: {"pipeline_error":15} [534:465:0926/113047.581828:ERROR:batching_media_log.cc(38)] MediaEvent: {"error":"FFmpegDemuxer: open context failed"} [534:349:0926/113047.582073:ERROR:batching_media_log.cc(35)] MediaEvent: {"pipeline_error":12} [534:465:0926/113048.927298:ERROR:batching_media_log.cc(38)] MediaEvent: {"error":"video decoder initialization failed"} [534:349:0926/113048.931467:ERROR:batching_media_log.cc(35)] MediaEvent: {"pipeline_error":15} [534:465:0926/113056.399346:ERROR:batching_media_log.cc(38)] MediaEvent: {"error":"FFmpegDemuxer: open context failed"} [534:349:0926/113056.399596:ERROR:batching_media_log.cc(35)] MediaEvent: {"pipeline_error":12} [534:465:0926/113056.671129:ERROR:batching_media_log.cc(38)] MediaEvent: {"error":"audio decoder initialization failed"} [534:349:0926/113056.671984:ERROR:batching_media_log.cc(35)] MediaEvent: {"pipeline_error":15}` ``` </details> <details><summary>OUTPUT OF `firejail --debug vivaldi`</summary> ``` g752vs@g752vs:~$ firejail --debug vivaldi Autoselecting /bin/bash as shell Building quoted command line: 'vivaldi' Command name #vivaldi# Found vivaldi.profile profile in /usr/local/etc/firejail directory Reading profile /usr/local/etc/firejail/vivaldi.profile Found chromium-common.profile profile in /usr/local/etc/firejail directory Reading profile /usr/local/etc/firejail/chromium-common.profile Found disable-common.inc profile in /usr/local/etc/firejail directory Reading profile /usr/local/etc/firejail/disable-common.inc Found disable-devel.inc profile in /usr/local/etc/firejail directory Reading profile /usr/local/etc/firejail/disable-devel.inc Found disable-exec.inc profile in /usr/local/etc/firejail directory Reading profile /usr/local/etc/firejail/disable-exec.inc Found disable-interpreters.inc profile in /usr/local/etc/firejail directory Reading profile /usr/local/etc/firejail/disable-interpreters.inc Found disable-programs.inc profile in /usr/local/etc/firejail directory Reading profile /usr/local/etc/firejail/disable-programs.inc Found whitelist-common.inc profile in /usr/local/etc/firejail directory Reading profile /usr/local/etc/firejail/whitelist-common.inc Found whitelist-var-common.inc profile in /usr/local/etc/firejail directory Reading profile /usr/local/etc/firejail/whitelist-var-common.inc conditional BROWSER_DISABLE_U2F, nou2f conditional BROWSER_DISABLE_U2F, private-dev DISPLAY=:0 parsed as 0 Using the local network stack Parent pid 16198, child pid 16199 Initializing child process Host network configured PID namespace installed Mounting tmpfs on /run/firejail/mnt directory Creating empty /run/firejail/mnt/seccomp directory Creating empty /run/firejail/mnt/seccomp/seccomp.protocol file Creating empty /run/firejail/mnt/seccomp/seccomp.postexec file Creating empty /run/firejail/mnt/seccomp/seccomp.postexec32 file IBUS_ADDRESS=unix:abstract=/tmp/dbus-7gj3JyUQ,guid=aa4dfc1ff6e46e02389ab13a5f6f51d0 IBUS_DAEMON_PID=1023 Mounting /proc filesystem representing the PID namespace Basic read-only filesystem: Mounting read-only /etc 731 627 259:8 /etc /etc ro,relatime master:1 - ext4 /dev/nvme0n1p3 rw,errors=remount-ro mountid=731 fsname=/etc dir=/etc fstype=ext4 Mounting noexec /etc 732 731 259:8 /etc /etc ro,nosuid,nodev,noexec,relatime master:1 - ext4 /dev/nvme0n1p3 rw,errors=remount-ro mountid=732 fsname=/etc dir=/etc fstype=ext4 Mounting read-only /usr 736 627 259:8 /usr /usr ro,relatime master:1 - ext4 /dev/nvme0n1p3 rw,errors=remount-ro mountid=736 fsname=/usr dir=/usr fstype=ext4 Mounting read-only /bin 737 627 259:8 /bin /bin ro,relatime master:1 - ext4 /dev/nvme0n1p3 rw,errors=remount-ro mountid=737 fsname=/bin dir=/bin fstype=ext4 Mounting read-only /sbin 761 627 259:8 /sbin /sbin ro,relatime master:1 - ext4 /dev/nvme0n1p3 rw,errors=remount-ro mountid=761 fsname=/sbin dir=/sbin fstype=ext4 Mounting read-only /lib 762 627 259:8 /lib /lib ro,relatime master:1 - ext4 /dev/nvme0n1p3 rw,errors=remount-ro mountid=762 fsname=/lib dir=/lib fstype=ext4 Mounting read-only /lib64 825 627 259:8 /lib64 /lib64 ro,relatime master:1 - ext4 /dev/nvme0n1p3 rw,errors=remount-ro mountid=825 fsname=/lib64 dir=/lib64 fstype=ext4 Mounting tmpfs on /var/lock Mounting tmpfs on /var/tmp Mounting tmpfs on /var/log Mounting tmpfs on /var/lib/dhcp Mounting tmpfs on /var/lib/snmp Mounting tmpfs on /var/lib/sudo Create the new utmp file Mount the new utmp file Cleaning /home directory Cleaning /run/user directory Sanitizing /etc/passwd, UID_MIN 1000 Sanitizing /etc/group, GID_MIN 1000 Disable /run/firejail/network Disable /run/firejail/bandwidth Disable /run/firejail/name Disable /run/firejail/profile Disable /run/firejail/x11 Mounting tmpfs on /dev mounting /run/firejail/mnt/dev/snd directory mounting /run/firejail/mnt/dev/dri directory mounting /run/firejail/mnt/dev/nvidia0 file mounting /run/firejail/mnt/dev/nvidiactl file mounting /run/firejail/mnt/dev/nvidia-modeset file mounting /run/firejail/mnt/dev/video0 file mounting /run/firejail/mnt/dev/video1 file Process /dev/shm directory blacklist /run/firejail/dbus Mounting read-only /proc/sys Remounting /sys directory Disable /sys/firmware Disable /sys/hypervisor Disable /sys/power Disable /sys/kernel/debug Disable /sys/kernel/vmcoreinfo Disable /proc/sys/fs/binfmt_misc Disable /proc/sys/kernel/core_pattern Disable /proc/sys/kernel/modprobe Disable /proc/sysrq-trigger Disable /proc/sys/vm/panic_on_oom Disable /proc/irq Disable /proc/bus Disable /proc/sched_debug Disable /proc/timer_list Disable /proc/kcore Disable /proc/kallsyms Disable /lib/modules Disable /usr/lib/debug Disable /boot Disable /run/user/1000/gnupg Disable /run/user/1000/systemd Disable /proc/kmsg Debug 456: new_name #/var/opt/vivaldi#, whitelist Debug 456: new_name #/home/g752vs/.cache/vivaldi#, whitelist Debug 571: fname #/home/g752vs/.cache/vivaldi#, cfg.homedir #/home/g752vs# Replaced whitelist path: whitelist /home/g752vs/.cache/vivaldi Debug 456: new_name #/home/g752vs/.config/vivaldi#, whitelist Debug 571: fname #/home/g752vs/.config/vivaldi#, cfg.homedir #/home/g752vs# Replaced whitelist path: whitelist /home/g752vs/.config/vivaldi Debug 456: new_name #/home/g752vs/.local/lib/vivaldi#, whitelist Debug 571: fname #/home/g752vs/.local/lib/vivaldi#, cfg.homedir #/home/g752vs# Replaced whitelist path: whitelist /home/g752vs/.local/lib/vivaldi Directory ${DOWNLOADS} resolved as Downloads Debug 456: new_name #/home/g752vs/Downloads#, whitelist Debug 571: fname #/home/g752vs/Downloads#, cfg.homedir #/home/g752vs# Replaced whitelist path: whitelist /home/g752vs/Downloads Debug 456: new_name #/home/g752vs/.pki#, whitelist Debug 571: fname #/home/g752vs/.pki#, cfg.homedir #/home/g752vs# Replaced whitelist path: whitelist /home/g752vs/.pki Debug 456: new_name #/home/g752vs/.local/share/pki#, whitelist Debug 571: fname #/home/g752vs/.local/share/pki#, cfg.homedir #/home/g752vs# Replaced whitelist path: whitelist /home/g752vs/.local/share/pki Debug 456: new_name #/home/g752vs/.XCompose#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.XCompose expanded: /home/g752vs/.XCompose real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.asoundrc#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.asoundrc expanded: /home/g752vs/.asoundrc real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.config/ibus#, whitelist Debug 571: fname #/home/g752vs/.config/ibus#, cfg.homedir #/home/g752vs# Replaced whitelist path: whitelist /home/g752vs/.config/ibus Debug 456: new_name #/home/g752vs/.config/mimeapps.list#, whitelist Debug 571: fname #/home/g752vs/.config/mimeapps.list#, cfg.homedir #/home/g752vs# Replaced whitelist path: whitelist /home/g752vs/.config/mimeapps.list Debug 456: new_name #/home/g752vs/.config/pkcs11#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/pkcs11 expanded: /home/g752vs/.config/pkcs11 real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.config/user-dirs.dirs#, whitelist Debug 571: fname #/home/g752vs/.config/user-dirs.dirs#, cfg.homedir #/home/g752vs# Replaced whitelist path: whitelist /home/g752vs/.config/user-dirs.dirs Debug 456: new_name #/home/g752vs/.config/user-dirs.locale#, whitelist Debug 571: fname #/home/g752vs/.config/user-dirs.locale#, cfg.homedir #/home/g752vs# Replaced whitelist path: whitelist /home/g752vs/.config/user-dirs.locale Debug 456: new_name #/home/g752vs/.drirc#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.drirc expanded: /home/g752vs/.drirc real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.icons#, whitelist Debug 571: fname #/home/g752vs/.icons#, cfg.homedir #/home/g752vs# Replaced whitelist path: whitelist /home/g752vs/.icons Debug 456: new_name #/home/g752vs/.local/share/applications#, whitelist Debug 571: fname #/home/g752vs/.local/share/applications#, cfg.homedir #/home/g752vs# Replaced whitelist path: whitelist /home/g752vs/.local/share/applications Debug 456: new_name #/home/g752vs/.local/share/icons#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.local/share/icons expanded: /home/g752vs/.local/share/icons real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.local/share/mime#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.local/share/mime expanded: /home/g752vs/.local/share/mime real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.mime.types#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.mime.types expanded: /home/g752vs/.mime.types real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.uim.d#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.uim.d expanded: /home/g752vs/.uim.d real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.config/dconf#, whitelist Debug 571: fname #/home/g752vs/.config/dconf#, cfg.homedir #/home/g752vs# Replaced whitelist path: whitelist /home/g752vs/.config/dconf Debug 456: new_name #/home/g752vs/.cache/fontconfig#, whitelist Debug 571: fname #/home/g752vs/.cache/fontconfig#, cfg.homedir #/home/g752vs# Replaced whitelist path: whitelist /home/g752vs/.cache/fontconfig Debug 456: new_name #/home/g752vs/.config/fontconfig#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/fontconfig expanded: /home/g752vs/.config/fontconfig real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.fontconfig#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.fontconfig expanded: /home/g752vs/.fontconfig real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.fonts#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.fonts expanded: /home/g752vs/.fonts real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.fonts.conf#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.fonts.conf expanded: /home/g752vs/.fonts.conf real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.fonts.conf.d#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.fonts.conf.d expanded: /home/g752vs/.fonts.conf.d real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.fonts.d#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.fonts.d expanded: /home/g752vs/.fonts.d real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.local/share/fonts#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.local/share/fonts expanded: /home/g752vs/.local/share/fonts real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.pangorc#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.pangorc expanded: /home/g752vs/.pangorc real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.config/gtk-2.0#, whitelist Debug 571: fname #/home/g752vs/.config/gtk-2.0#, cfg.homedir #/home/g752vs# Replaced whitelist path: whitelist /home/g752vs/.config/gtk-2.0 Debug 456: new_name #/home/g752vs/.config/gtk-3.0#, whitelist Debug 571: fname #/home/g752vs/.config/gtk-3.0#, cfg.homedir #/home/g752vs# Replaced whitelist path: whitelist /home/g752vs/.config/gtk-3.0 Debug 456: new_name #/home/g752vs/.config/gtk-4.0#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/gtk-4.0 expanded: /home/g752vs/.config/gtk-4.0 real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.config/gtkrc#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/gtkrc expanded: /home/g752vs/.config/gtkrc real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.config/gtkrc-2.0#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/gtkrc-2.0 expanded: /home/g752vs/.config/gtkrc-2.0 real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.gnome2#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.gnome2 expanded: /home/g752vs/.gnome2 real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.gnome2-private#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.gnome2-private expanded: /home/g752vs/.gnome2-private real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.gtk-2.0#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.gtk-2.0 expanded: /home/g752vs/.gtk-2.0 real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.gtkrc#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.gtkrc expanded: /home/g752vs/.gtkrc real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.gtkrc-2.0#, whitelist Debug 571: fname #/home/g752vs/.gtkrc-2.0#, cfg.homedir #/home/g752vs# Replaced whitelist path: whitelist /home/g752vs/.gtkrc-2.0 Debug 456: new_name #/home/g752vs/.kde/share/config/gtkrc#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/gtkrc expanded: /home/g752vs/.kde/share/config/gtkrc real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.kde/share/config/gtkrc-2.0#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/gtkrc-2.0 expanded: /home/g752vs/.kde/share/config/gtkrc-2.0 real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.kde4/share/config/gtkrc#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/gtkrc expanded: /home/g752vs/.kde4/share/config/gtkrc real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.kde4/share/config/gtkrc-2.0#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/gtkrc-2.0 expanded: /home/g752vs/.kde4/share/config/gtkrc-2.0 real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.local/share/themes#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.local/share/themes expanded: /home/g752vs/.local/share/themes real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.themes#, whitelist Debug 571: fname #/home/g752vs/.themes#, cfg.homedir #/home/g752vs# Replaced whitelist path: whitelist /home/g752vs/.themes Debug 456: new_name #/home/g752vs/.cache/kioexec/krun#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.cache/kioexec/krun expanded: /home/g752vs/.cache/kioexec/krun real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.config/Kvantum#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/Kvantum expanded: /home/g752vs/.config/Kvantum real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.config/Trolltech.conf#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/Trolltech.conf expanded: /home/g752vs/.config/Trolltech.conf real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.config/kdeglobals#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/kdeglobals expanded: /home/g752vs/.config/kdeglobals real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.config/kio_httprc#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/kio_httprc expanded: /home/g752vs/.config/kio_httprc real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.config/kioslaverc#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/kioslaverc expanded: /home/g752vs/.config/kioslaverc real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.config/ksslcablacklist#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/ksslcablacklist expanded: /home/g752vs/.config/ksslcablacklist real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.config/qt5ct#, whitelist Debug 571: fname #/home/g752vs/.config/qt5ct#, cfg.homedir #/home/g752vs# Replaced whitelist path: whitelist /home/g752vs/.config/qt5ct Debug 456: new_name #/home/g752vs/.kde/share/config/kdeglobals#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/kdeglobals expanded: /home/g752vs/.kde/share/config/kdeglobals real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.kde/share/config/kio_httprc#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/kio_httprc expanded: /home/g752vs/.kde/share/config/kio_httprc real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.kde/share/config/kioslaverc#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/kioslaverc expanded: /home/g752vs/.kde/share/config/kioslaverc real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.kde/share/config/ksslcablacklist#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/ksslcablacklist expanded: /home/g752vs/.kde/share/config/ksslcablacklist real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.kde/share/config/oxygenrc#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/oxygenrc expanded: /home/g752vs/.kde/share/config/oxygenrc real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.kde/share/icons#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/icons expanded: /home/g752vs/.kde/share/icons real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.kde4/share/config/kdeglobals#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/kdeglobals expanded: /home/g752vs/.kde4/share/config/kdeglobals real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.kde4/share/config/kio_httprc#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/kio_httprc expanded: /home/g752vs/.kde4/share/config/kio_httprc real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.kde4/share/config/kioslaverc#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/kioslaverc expanded: /home/g752vs/.kde4/share/config/kioslaverc real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.kde4/share/config/ksslcablacklist#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/ksslcablacklist expanded: /home/g752vs/.kde4/share/config/ksslcablacklist real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.kde4/share/config/oxygenrc#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/oxygenrc expanded: /home/g752vs/.kde4/share/config/oxygenrc real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.kde4/share/icons#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/icons expanded: /home/g752vs/.kde4/share/icons real path: (null) realpath: No such file or directory Debug 456: new_name #/home/g752vs/.local/share/qt5ct#, whitelist Removed whitelist/nowhitelist path: whitelist ${HOME}/.local/share/qt5ct expanded: /home/g752vs/.local/share/qt5ct real path: (null) realpath: No such file or directory Debug 456: new_name #/var/lib/ca-certificates#, whitelist Removed whitelist/nowhitelist path: whitelist /var/lib/ca-certificates expanded: /var/lib/ca-certificates real path: (null) realpath: No such file or directory Debug 456: new_name #/var/lib/dbus#, whitelist Debug 456: new_name #/var/lib/menu-xdg#, whitelist Removed whitelist/nowhitelist path: whitelist /var/lib/menu-xdg expanded: /var/lib/menu-xdg real path: (null) realpath: No such file or directory Debug 456: new_name #/var/lib/uim#, whitelist Removed whitelist/nowhitelist path: whitelist /var/lib/uim expanded: /var/lib/uim real path: (null) realpath: No such file or directory Debug 456: new_name #/var/cache/fontconfig#, whitelist Debug 456: new_name #/var/tmp#, whitelist Debug 456: new_name #/var/run#, whitelist Replaced whitelist path: whitelist /run Debug 456: new_name #/var/lock#, whitelist Replaced whitelist path: whitelist /run/lock Mounting tmpfs on /var directory Drop privileges: pid 2, uid 1000, gid 1000, nogroups 0 Mounting a new /root directory Mounting a new /home directory Create a new user directory Drop privileges: pid 3, uid 1000, gid 1000, nogroups 0 Drop privileges: pid 4, uid 1000, gid 1000, nogroups 0 Whitelisting /var/opt/vivaldi 885 881 259:8 /var/opt/vivaldi /var/opt/vivaldi rw,relatime master:1 - ext4 /dev/nvme0n1p3 rw,errors=remount-ro mountid=885 fsname=/var/opt/vivaldi dir=/var/opt/vivaldi fstype=ext4 Whitelisting /home/g752vs/.cache/vivaldi 886 884 259:9 /g752vs/.cache/vivaldi /home/g752vs/.cache/vivaldi rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=886 fsname=/g752vs/.cache/vivaldi dir=/home/g752vs/.cache/vivaldi fstype=ext4 Whitelisting /home/g752vs/.config/vivaldi 887 884 259:9 /g752vs/.config/vivaldi /home/g752vs/.config/vivaldi rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=887 fsname=/g752vs/.config/vivaldi dir=/home/g752vs/.config/vivaldi fstype=ext4 Whitelisting /home/g752vs/.local/lib/vivaldi 888 884 259:9 /g752vs/.local/lib/vivaldi /home/g752vs/.local/lib/vivaldi rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=888 fsname=/g752vs/.local/lib/vivaldi dir=/home/g752vs/.local/lib/vivaldi fstype=ext4 Whitelisting /home/g752vs/Downloads 889 884 259:9 /g752vs/Downloads /home/g752vs/Downloads rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=889 fsname=/g752vs/Downloads dir=/home/g752vs/Downloads fstype=ext4 Whitelisting /home/g752vs/.pki 890 884 259:9 /g752vs/.pki /home/g752vs/.pki rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=890 fsname=/g752vs/.pki dir=/home/g752vs/.pki fstype=ext4 Whitelisting /home/g752vs/.local/share/pki 891 884 259:9 /g752vs/.local/share/pki /home/g752vs/.local/share/pki rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=891 fsname=/g752vs/.local/share/pki dir=/home/g752vs/.local/share/pki fstype=ext4 Whitelisting /home/g752vs/.config/ibus 892 884 259:9 /g752vs/.config/ibus /home/g752vs/.config/ibus rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=892 fsname=/g752vs/.config/ibus dir=/home/g752vs/.config/ibus fstype=ext4 Whitelisting /home/g752vs/.config/mimeapps.list 893 884 259:9 /g752vs/.config/mimeapps.list /home/g752vs/.config/mimeapps.list rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=893 fsname=/g752vs/.config/mimeapps.list dir=/home/g752vs/.config/mimeapps.list fstype=ext4 Whitelisting /home/g752vs/.config/user-dirs.dirs 894 884 259:9 /g752vs/.config/user-dirs.dirs /home/g752vs/.config/user-dirs.dirs rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=894 fsname=/g752vs/.config/user-dirs.dirs dir=/home/g752vs/.config/user-dirs.dirs fstype=ext4 Whitelisting /home/g752vs/.config/user-dirs.locale 895 884 259:9 /g752vs/.config/user-dirs.locale /home/g752vs/.config/user-dirs.locale rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=895 fsname=/g752vs/.config/user-dirs.locale dir=/home/g752vs/.config/user-dirs.locale fstype=ext4 Whitelisting /home/g752vs/.icons 896 884 259:9 /g752vs/.icons /home/g752vs/.icons rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=896 fsname=/g752vs/.icons dir=/home/g752vs/.icons fstype=ext4 Whitelisting /home/g752vs/.local/share/applications 897 884 259:9 /g752vs/.local/share/applications /home/g752vs/.local/share/applications rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=897 fsname=/g752vs/.local/share/applications dir=/home/g752vs/.local/share/applications fstype=ext4 Whitelisting /home/g752vs/.config/dconf 898 884 259:9 /g752vs/.config/dconf /home/g752vs/.config/dconf rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=898 fsname=/g752vs/.config/dconf dir=/home/g752vs/.config/dconf fstype=ext4 Whitelisting /home/g752vs/.cache/fontconfig 899 884 259:9 /g752vs/.cache/fontconfig /home/g752vs/.cache/fontconfig rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=899 fsname=/g752vs/.cache/fontconfig dir=/home/g752vs/.cache/fontconfig fstype=ext4 Whitelisting /home/g752vs/.config/gtk-2.0 900 884 259:9 /g752vs/.config/gtk-2.0 /home/g752vs/.config/gtk-2.0 rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=900 fsname=/g752vs/.config/gtk-2.0 dir=/home/g752vs/.config/gtk-2.0 fstype=ext4 Whitelisting /home/g752vs/.config/gtk-3.0 901 884 259:9 /g752vs/.config/gtk-3.0 /home/g752vs/.config/gtk-3.0 rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=901 fsname=/g752vs/.config/gtk-3.0 dir=/home/g752vs/.config/gtk-3.0 fstype=ext4 Whitelisting /home/g752vs/.gtkrc-2.0 902 884 259:9 /g752vs/.gtkrc-2.0 /home/g752vs/.gtkrc-2.0 rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=902 fsname=/g752vs/.gtkrc-2.0 dir=/home/g752vs/.gtkrc-2.0 fstype=ext4 Whitelisting /home/g752vs/.themes 903 884 259:9 /g752vs/.themes /home/g752vs/.themes rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=903 fsname=/g752vs/.themes dir=/home/g752vs/.themes fstype=ext4 Whitelisting /home/g752vs/.config/qt5ct 904 884 259:9 /g752vs/.config/qt5ct /home/g752vs/.config/qt5ct rw,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=904 fsname=/g752vs/.config/qt5ct dir=/home/g752vs/.config/qt5ct fstype=ext4 Whitelisting /var/lib/dbus 905 881 259:8 /var/lib/dbus /var/lib/dbus rw,relatime master:1 - ext4 /dev/nvme0n1p3 rw,errors=remount-ro mountid=905 fsname=/var/lib/dbus dir=/var/lib/dbus fstype=ext4 Whitelisting /var/cache/fontconfig 906 881 259:8 /var/cache/fontconfig /var/cache/fontconfig rw,relatime master:1 - ext4 /dev/nvme0n1p3 rw,errors=remount-ro mountid=906 fsname=/var/cache/fontconfig dir=/var/cache/fontconfig fstype=ext4 Whitelisting /var/tmp 907 881 0:53 / /var/tmp rw,nosuid,nodev,noexec - tmpfs tmpfs rw mountid=907 fsname=/ dir=/var/tmp fstype=tmpfs Created symbolic link /var/run -> /run Created symbolic link /var/lock -> /run/lock Disable /etc/X11/Xsession.d Disable /etc/xdg/autostart Mounting read-only /home/g752vs/.Xauthority 912 884 0:66 /g752vs/.Xauthority /home/g752vs/.Xauthority ro,nosuid,nodev,noexec - tmpfs tmpfs rw,mode=755 mountid=912 fsname=/g752vs/.Xauthority dir=/home/g752vs/.Xauthority fstype=tmpfs Mounting read-only /home/g752vs/.config/dconf 913 898 259:9 /g752vs/.config/dconf /home/g752vs/.config/dconf ro,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=913 fsname=/g752vs/.config/dconf dir=/home/g752vs/.config/dconf fstype=ext4 Disable /usr/bin/systemd-run Disable /run/user/1000/systemd Disable /etc/init.d (requested /etc/init.d/) Not blacklist /var/opt Disable /run/acpid.socket (requested /var/run/acpid.socket) Disable /etc/anacrontab Disable /etc/cron.daily Disable /etc/crontab Disable /etc/cron.monthly Disable /etc/cron.weekly Disable /etc/cron.d Disable /etc/cron.hourly Disable /etc/profile.d Disable /etc/rcS.d Disable /etc/rc3.d Disable /etc/rc2.d Disable /etc/rc4.d Disable /etc/rc0.d Disable /etc/rc6.d Disable /etc/rc5.d Disable /etc/rc1.d Disable /etc/kernel Disable /etc/kernel-img.conf Disable /etc/grub.d Disable /etc/dkms Disable /etc/apparmor Disable /etc/apparmor.d Disable /etc/selinux Disable /etc/modules Disable /etc/modules-load.d Disable /etc/logrotate.d Disable /etc/logrotate.conf Disable /etc/adduser.conf Mounting read-only /home/g752vs/.bashrc 946 884 0:66 /g752vs/.bashrc /home/g752vs/.bashrc ro,nosuid,nodev,noexec - tmpfs tmpfs rw,mode=755 mountid=946 fsname=/g752vs/.bashrc dir=/home/g752vs/.bashrc fstype=tmpfs Mounting read-only /home/g752vs/.local/share/applications 947 897 259:9 /g752vs/.local/share/applications /home/g752vs/.local/share/applications ro,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=947 fsname=/g752vs/.local/share/applications dir=/home/g752vs/.local/share/applications fstype=ext4 Mounting read-only /home/g752vs/.config/mimeapps.list 948 893 259:9 /g752vs/.config/mimeapps.list /home/g752vs/.config/mimeapps.list ro,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=948 fsname=/g752vs/.config/mimeapps.list dir=/home/g752vs/.config/mimeapps.list fstype=ext4 Mounting read-only /home/g752vs/.config/user-dirs.dirs 949 894 259:9 /g752vs/.config/user-dirs.dirs /home/g752vs/.config/user-dirs.dirs ro,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=949 fsname=/g752vs/.config/user-dirs.dirs dir=/home/g752vs/.config/user-dirs.dirs fstype=ext4 Mounting read-only /home/g752vs/.config/user-dirs.locale 950 895 259:9 /g752vs/.config/user-dirs.locale /home/g752vs/.config/user-dirs.locale ro,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=950 fsname=/g752vs/.config/user-dirs.locale dir=/home/g752vs/.config/user-dirs.locale fstype=ext4 Not blacklist /home/g752vs/.pki Not blacklist /home/g752vs/.local/share/pki Disable /etc/group- Disable /etc/gshadow Disable /etc/gshadow- Disable /etc/passwd- Disable /etc/shadow Disable /etc/shadow- Disable /etc/ssh Disable /sbin Disable /usr/local/sbin Disable /usr/sbin Disable /bin/busybox Disable /usr/bin/chage Disable /usr/bin/chfn Disable /usr/bin/chsh Disable /usr/bin/crontab Disable /usr/bin/expiry Disable /bin/fusermount Disable /usr/bin/gpasswd Disable /bin/mount Disable /bin/nc.openbsd (requested /bin/nc) Disable /usr/bin/newgrp Disable /bin/ntfs-3g Disable /usr/bin/pkexec Disable /usr/bin/newgrp (requested /usr/bin/sg) Disable /usr/bin/strace Disable /bin/su Disable /usr/bin/sudo Disable /bin/umount Disable /usr/bin/xev Disable /usr/bin/xinput Disable /usr/bin/gnome-terminal Disable /usr/bin/gnome-terminal.wrapper Debug: no access to file /run/user/1000/doc, forcing mount Disable /run/user/1000/doc Disable /usr/share/flatpak Disable /usr/bin/bwrap Disable /usr/bin/dig Disable /usr/bin/nslookup Disable /usr/bin/host Disable /usr/bin/resolvectl Disable /usr/bin/x86_64-linux-gnu-as (requested /usr/bin/as) Disable /usr/bin/x86_64-linux-gnu-gcc-8 (requested /usr/bin/cc) Disable /usr/bin/x86_64-linux-gnu-g++-8 (requested /usr/bin/c++) Disable /usr/bin/x86_64-linux-gnu-c++filt (requested /usr/bin/c++filt) Disable /usr/bin/c89-gcc Disable /usr/bin/c89-gcc (requested /usr/bin/c89) Disable /usr/bin/c99-gcc (requested /usr/bin/c99) Disable /usr/bin/c99-gcc Disable /usr/bin/x86_64-linux-gnu-cpp-8 (requested /usr/bin/cpp-8) Disable /usr/bin/x86_64-linux-gnu-cpp-6 (requested /usr/bin/cpp-6) Disable /usr/bin/x86_64-linux-gnu-cpp-8 (requested /usr/bin/cpp) Disable /usr/bin/x86_64-linux-gnu-g++-6 (requested /usr/bin/g++-6) Disable /usr/bin/x86_64-linux-gnu-g++-8 (requested /usr/bin/g++) Disable /usr/bin/x86_64-linux-gnu-g++-8 (requested /usr/bin/g++-8) Disable /usr/bin/x86_64-linux-gnu-gcc-nm-8 (requested /usr/bin/gcc-nm-8) Disable /usr/bin/x86_64-linux-gnu-gcc-8 (requested /usr/bin/gcc-8) Disable /usr/bin/x86_64-linux-gnu-gcc-ranlib-8 (requested /usr/bin/gcc-ranlib) Disable /usr/bin/x86_64-linux-gnu-gcc-ranlib-6 (requested /usr/bin/gcc-ranlib-6) Disable /usr/bin/x86_64-linux-gnu-gcc-nm-8 (requested /usr/bin/gcc-nm) Disable /usr/bin/x86_64-linux-gnu-gcc-nm-6 (requested /usr/bin/gcc-nm-6) Disable /usr/bin/x86_64-linux-gnu-gcc-ar-8 (requested /usr/bin/gcc-ar) Disable /usr/bin/x86_64-linux-gnu-gcc-ar-8 (requested /usr/bin/gcc-ar-8) Disable /usr/bin/x86_64-linux-gnu-gcc-8 (requested /usr/bin/gcc) Disable /usr/bin/x86_64-linux-gnu-gcc-ranlib-8 (requested /usr/bin/gcc-ranlib-8) Disable /usr/bin/x86_64-linux-gnu-gcc-ar-6 (requested /usr/bin/gcc-ar-6) Disable /usr/bin/x86_64-linux-gnu-gcc-6 (requested /usr/bin/gcc-6) Disable /usr/bin/gdb Disable /usr/bin/x86_64-linux-gnu-ld.bfd (requested /usr/bin/ld) Disable /usr/bin/x86_64-linux-gnu-gcc-ar-6 Disable /usr/bin/x86_64-linux-gnu-gcc-8 Disable /usr/bin/x86_64-linux-gnu-gcc-nm-6 Disable /usr/bin/x86_64-linux-gnu-gcc-6 Disable /usr/bin/x86_64-linux-gnu-gcc-ranlib-6 Disable /usr/bin/x86_64-linux-gnu-gcc-8 (requested /usr/bin/x86_64-linux-gnu-gcc) Disable /usr/bin/x86_64-linux-gnu-gcc-nm-8 (requested /usr/bin/x86_64-linux-gnu-gcc-nm) Disable /usr/bin/c89-gcc Disable /usr/bin/x86_64-linux-gnu-gcc-ranlib-8 (requested /usr/bin/x86_64-linux-gnu-gcc-ranlib) Disable /usr/bin/x86_64-linux-gnu-gcc-ranlib-8 Disable /usr/bin/x86_64-linux-gnu-gcc-nm-8 Disable /usr/bin/x86_64-linux-gnu-gcc-ar-8 Disable /usr/bin/x86_64-linux-gnu-gcc-ar-8 (requested /usr/bin/x86_64-linux-gnu-gcc-ar) Disable /usr/bin/c99-gcc Disable /usr/bin/x86_64-linux-gnu-g++-8 (requested /usr/bin/x86_64-linux-gnu-g++) Disable /usr/bin/x86_64-linux-gnu-g++-6 Disable /usr/bin/x86_64-linux-gnu-g++-8 Disable /usr/bin/x86_64-linux-gnu-gcc-ar-6 Disable /usr/bin/x86_64-linux-gnu-gcc-8 Disable /usr/bin/x86_64-linux-gnu-gcc-nm-6 Disable /usr/bin/x86_64-linux-gnu-gcc-6 Disable /usr/bin/x86_64-linux-gnu-gcc-ranlib-6 Disable /usr/bin/x86_64-linux-gnu-gcc-8 (requested /usr/bin/x86_64-linux-gnu-gcc) Disable /usr/bin/x86_64-linux-gnu-gcc-nm-8 (requested /usr/bin/x86_64-linux-gnu-gcc-nm) Disable /usr/bin/c89-gcc Disable /usr/bin/x86_64-linux-gnu-gcc-ranlib-8 (requested /usr/bin/x86_64-linux-gnu-gcc-ranlib) Disable /usr/bin/x86_64-linux-gnu-gcc-ranlib-8 Disable /usr/bin/x86_64-linux-gnu-gcc-nm-8 Disable /usr/bin/x86_64-linux-gnu-gcc-ar-8 Disable /usr/bin/x86_64-linux-gnu-gcc-ar-8 (requested /usr/bin/x86_64-linux-gnu-gcc-ar) Disable /usr/bin/c99-gcc Disable /usr/bin/x86_64-linux-gnu-g++-8 (requested /usr/bin/x86_64-linux-gnu-g++) Disable /usr/bin/x86_64-linux-gnu-g++-6 Disable /usr/bin/x86_64-linux-gnu-g++-8 Disable /usr/lib/jvm/java-11-openjdk-amd64/bin/java (requested /usr/bin/java) Disable /usr/share/java Disable /usr/bin/openssl Disable /usr/lib/valgrind Disable /usr/src Disable /usr/local/src Disable /usr/include Disable /usr/local/include Mounting noexec /home/g752vs/.cache/vivaldi 1060 886 259:9 /g752vs/.cache/vivaldi /home/g752vs/.cache/vivaldi rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=1060 fsname=/g752vs/.cache/vivaldi dir=/home/g752vs/.cache/vivaldi fstype=ext4 Mounting noexec /home/g752vs/.config/vivaldi 1061 887 259:9 /g752vs/.config/vivaldi /home/g752vs/.config/vivaldi rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=1061 fsname=/g752vs/.config/vivaldi dir=/home/g752vs/.config/vivaldi fstype=ext4 Mounting noexec /home/g752vs/.local/lib/vivaldi 1062 888 259:9 /g752vs/.local/lib/vivaldi /home/g752vs/.local/lib/vivaldi rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=1062 fsname=/g752vs/.local/lib/vivaldi dir=/home/g752vs/.local/lib/vivaldi fstype=ext4 Mounting noexec /home/g752vs/Downloads 1063 889 259:9 /g752vs/Downloads /home/g752vs/Downloads rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=1063 fsname=/g752vs/Downloads dir=/home/g752vs/Downloads fstype=ext4 Mounting noexec /home/g752vs/.pki 1064 890 259:9 /g752vs/.pki /home/g752vs/.pki rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=1064 fsname=/g752vs/.pki dir=/home/g752vs/.pki fstype=ext4 Mounting noexec /home/g752vs/.local/share/pki 1065 891 259:9 /g752vs/.local/share/pki /home/g752vs/.local/share/pki rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=1065 fsname=/g752vs/.local/share/pki dir=/home/g752vs/.local/share/pki fstype=ext4 Mounting noexec /home/g752vs/.config/ibus 1066 892 259:9 /g752vs/.config/ibus /home/g752vs/.config/ibus rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=1066 fsname=/g752vs/.config/ibus dir=/home/g752vs/.config/ibus fstype=ext4 Mounting noexec /home/g752vs/.config/mimeapps.list 1067 948 259:9 /g752vs/.config/mimeapps.list /home/g752vs/.config/mimeapps.list ro,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=1067 fsname=/g752vs/.config/mimeapps.list dir=/home/g752vs/.config/mimeapps.list fstype=ext4 Mounting noexec /home/g752vs/.config/user-dirs.dirs 1068 949 259:9 /g752vs/.config/user-dirs.dirs /home/g752vs/.config/user-dirs.dirs ro,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=1068 fsname=/g752vs/.config/user-dirs.dirs dir=/home/g752vs/.config/user-dirs.dirs fstype=ext4 Mounting noexec /home/g752vs/.config/user-dirs.locale 1069 950 259:9 /g752vs/.config/user-dirs.locale /home/g752vs/.config/user-dirs.locale ro,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=1069 fsname=/g752vs/.config/user-dirs.locale dir=/home/g752vs/.config/user-dirs.locale fstype=ext4 Mounting noexec /home/g752vs/.icons 1070 896 259:9 /g752vs/.icons /home/g752vs/.icons rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=1070 fsname=/g752vs/.icons dir=/home/g752vs/.icons fstype=ext4 Mounting noexec /home/g752vs/.local/share/applications 1071 947 259:9 /g752vs/.local/share/applications /home/g752vs/.local/share/applications ro,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=1071 fsname=/g752vs/.local/share/applications dir=/home/g752vs/.local/share/applications fstype=ext4 Mounting noexec /home/g752vs/.config/dconf 1072 913 259:9 /g752vs/.config/dconf /home/g752vs/.config/dconf ro,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=1072 fsname=/g752vs/.config/dconf dir=/home/g752vs/.config/dconf fstype=ext4 Mounting noexec /home/g752vs/.cache/fontconfig 1073 899 259:9 /g752vs/.cache/fontconfig /home/g752vs/.cache/fontconfig rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=1073 fsname=/g752vs/.cache/fontconfig dir=/home/g752vs/.cache/fontconfig fstype=ext4 Mounting noexec /home/g752vs/.config/gtk-2.0 1074 900 259:9 /g752vs/.config/gtk-2.0 /home/g752vs/.config/gtk-2.0 rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=1074 fsname=/g752vs/.config/gtk-2.0 dir=/home/g752vs/.config/gtk-2.0 fstype=ext4 Mounting noexec /home/g752vs/.config/gtk-3.0 1075 901 259:9 /g752vs/.config/gtk-3.0 /home/g752vs/.config/gtk-3.0 rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=1075 fsname=/g752vs/.config/gtk-3.0 dir=/home/g752vs/.config/gtk-3.0 fstype=ext4 Mounting noexec /home/g752vs/.gtkrc-2.0 1076 902 259:9 /g752vs/.gtkrc-2.0 /home/g752vs/.gtkrc-2.0 rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=1076 fsname=/g752vs/.gtkrc-2.0 dir=/home/g752vs/.gtkrc-2.0 fstype=ext4 Mounting noexec /home/g752vs/.themes 1077 903 259:9 /g752vs/.themes /home/g752vs/.themes rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=1077 fsname=/g752vs/.themes dir=/home/g752vs/.themes fstype=ext4 Mounting noexec /home/g752vs/.config/qt5ct 1078 904 259:9 /g752vs/.config/qt5ct /home/g752vs/.config/qt5ct rw,nosuid,nodev,noexec,relatime master:59 - ext4 /dev/nvme0n1p4 rw,errors=remount-ro mountid=1078 fsname=/g752vs/.config/qt5ct dir=/home/g752vs/.config/qt5ct fstype=ext4 Mounting noexec /run/user/1000 1085 1084 0:23 /firejail/firejail.ro.dir /run/user/1000/systemd rw,nosuid,noexec,relatime master:5 - tmpfs tmpfs rw,size=1640148k,mode=755 mountid=1085 fsname=/firejail/firejail.ro.dir dir=/run/user/1000/systemd fstype=tmpfs Warning: not remounting /run/user/1000/gvfs Mounting noexec /run/user/1000/doc 1086 1082 0:23 /firejail/firejail.ro.dir /run/user/1000/doc rw,nosuid,nodev,noexec,relatime master:5 - tmpfs tmpfs rw,size=1640148k,mode=755 mountid=1086 fsname=/firejail/firejail.ro.dir dir=/run/user/1000/doc fstype=tmpfs Mounting noexec /dev/shm 1087 858 0:62 /shm /dev/shm rw,nosuid,nodev,noexec - tmpfs tmpfs rw,mode=755 mountid=1087 fsname=/shm dir=/dev/shm fstype=tmpfs Mounting noexec /tmp 1088 627 259:8 /tmp /tmp rw,nosuid,nodev,noexec,relatime master:1 - ext4 /dev/nvme0n1p3 rw,errors=remount-ro mountid=1088 fsname=/tmp dir=/tmp fstype=ext4 Disable /usr/share/lua Disable /usr/bin/cpan5.24-x86_64-linux-gnu Disable /usr/bin/cpan5.28-x86_64-linux-gnu Disable /usr/bin/cpan Disable /usr/bin/perl Disable /usr/share/perl Disable /usr/share/perl-openssl-defaults Disable /usr/share/perl5 Disable /usr/bin/python2.7 (requested /usr/bin/python2) Disable /usr/bin/python2.7 Disable /usr/lib/python2.7 Disable /usr/local/lib/python2.7 Disable /usr/bin/python3.5 Disable /usr/bin/python3.7 Disable /usr/bin/python3.7m (requested /usr/bin/python3m) Disable /usr/bin/python3.7 (requested /usr/bin/python3) Disable /usr/bin/python3.5m Disable /usr/bin/python3.7m Disable /usr/lib/python3.5 Disable /usr/lib/python3.7 Disable /usr/lib/python3 Disable /usr/local/lib/python3.5 Disable /usr/local/lib/python3.7 Disable /usr/share/python3 Not blacklist /home/g752vs/.config/vivaldi Not blacklist /home/g752vs/.local/lib/vivaldi Disable /tmp/ssh-CpmVQPU52orj Not blacklist /home/g752vs/.cache/vivaldi Disable /sys/fs Disable /sys/module Disable /mnt Disable /media Disable /run/mount Mounting noexec /run/firejail/mnt/pulse 1119 728 0:47 /pulse /run/firejail/mnt/pulse rw,nosuid,nodev,noexec - tmpfs tmpfs rw,mode=755 mountid=1119 fsname=/pulse dir=/run/firejail/mnt/pulse fstype=tmpfs Creating empty /home/g752vs/.config/pulse directory Drop privileges: pid 5, uid 1000, gid 1000, nogroups 0 Mounting /run/firejail/mnt/pulse on /home/g752vs/.config/pulse 1120 884 0:47 /pulse /home/g752vs/.config/pulse rw,nosuid,nodev,noexec - tmpfs tmpfs rw,mode=755 mountid=1120 fsname=/pulse dir=/home/g752vs/.config/pulse fstype=tmpfs Current directory: /home/g752vs DISPLAY=:0 parsed as 0 Mounting read-only /run/firejail/mnt/seccomp 1122 728 0:47 /seccomp /run/firejail/mnt/seccomp ro,nosuid - tmpfs tmpfs rw,mode=755 mountid=1122 fsname=/seccomp dir=/run/firejail/mnt/seccomp fstype=tmpfs Seccomp directory: ls /run/firejail/mnt/seccomp drwxr-xr-x root root 120 . drwxr-xr-x root root 300 .. -rw-r--r-- g752vs g752vs 1072 seccomp -rw-r--r-- g752vs g752vs 808 seccomp.32 -rw-r--r-- g752vs g752vs 0 seccomp.postexec -rw-r--r-- g752vs g752vs 0 seccomp.postexec32 No active seccomp files Set caps filter 240000 Drop privileges: pid 1, uid 1000, gid 1000, nogroups 1 No supplementary groups starting application LD_PRELOAD=(null) execvp argument 0: vivaldi Child process initialized in 69.94 ms Searching $PATH for vivaldi trying #/usr/local/bin/vivaldi# trying #/usr/bin/vivaldi# monitoring pid 6 [6:6:0926/113333.910906:ERROR:chrome_content_client.cc(346)] Failed to locate and load the component updated flash plugin. [6:43:0926/113333.948156:ERROR:database.cc(1584)] Calendar sqlite error 1, errno 0: no such column: etag, sql: update events set etag = '' [6:43:0926/113333.948186:ERROR:calendar_database.cc(47)] Calendar DB failed to migrate from version 1. Calendar API will be disabled. [6:43:0926/113333.955218:ERROR:calendar_backend.cc(158)] INIT_TOO_NEW [6:6:0926/113333.980777:ERROR:browser_switcher_service.cc(238)] XXX Init() [6:6:0926/113335.979637:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.979694:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.979740:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.979784:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.979878:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.979925:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.979970:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.980016:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.980058:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.980100:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.980142:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.980186:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.980229:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.980285:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.980341:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.980385:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.980429:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.980470:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.980512:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.980555:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.980599:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.980638:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.983789:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.983848:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.983890:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.983932:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.983970:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984014:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984055:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984095:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984126:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984234:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984281:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984320:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984373:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984416:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984457:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984498:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984537:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984568:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984600:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984632:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984671:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984707:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984741:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984784:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984828:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984873:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984909:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984946:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.984988:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.985024:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.985062:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.985100:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.985138:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.985177:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.985221:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.986764:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.986821:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.986859:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.986894:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.986933:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.986965:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) [6:6:0926/113335.987001:ERROR:CONSOLE(0)] "Unchecked runtime.lastError: The message port closed before a response was received.", source: chrome-extension://mpognobbkildjkofajifpdfhcoklimli/browser.html (0) Fontconfig error: Cannot load default config file: No such file: (null) Fontconfig error: Cannot load default config file: No such file: (null) [729:469:0926/113437.145634:ERROR:cdm_module.cc(135)] CDM at /home/g752vs/.config/vivaldi/WidevineCdm/4.10.1610.0/_platform_specific/linux_x64/libwidevinecdm.so could not be loaded. [729:469:0926/113437.145752:ERROR:cdm_module.cc(136)] Error: /home/g752vs/.config/vivaldi/WidevineCdm/4.10.1610.0/_platform_specific/linux_x64/libwidevinecdm.so: cannot open shared object file: Operation not permitted ``` </details> <details><summary>OUTPUT OF `firejail firefox`</summary> ``` g752vs@g752vs:~$ firejail firefox Reading profile /usr/local/etc/firejail/firefox.profile Reading profile /usr/local/etc/firejail/whitelist-usr-share-common.inc Reading profile /usr/local/etc/firejail/firefox-common.profile Reading profile /usr/local/etc/firejail/disable-common.inc Reading profile /usr/local/etc/firejail/disable-devel.inc Reading profile /usr/local/etc/firejail/disable-exec.inc Reading profile /usr/local/etc/firejail/disable-interpreters.inc Reading profile /usr/local/etc/firejail/disable-programs.inc Reading profile /usr/local/etc/firejail/whitelist-common.inc Reading profile /usr/local/etc/firejail/whitelist-var-common.inc Seccomp list in: !chroot, check list: @default-keep, prelist: unknown, Parent pid 20214, child pid 20217 Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. Warning: not remounting /run/user/1000/gvfs Seccomp list in: !chroot, check list: @default-keep, prelist: unknown, Child process initialized in 80.74 ms ###!!! [Parent][MessageChannel::Call] Error: Channel error: cannot send/recv ###!!! [Parent][MessageChannel::Call] Error: Channel error: cannot send/recv ###!!! [Parent][MessageChannel::Call] Error: Channel error: cannot send/recv ###!!! [Parent][MessageChannel::Call] Error: Channel error: cannot send/recv ###!!! [Parent][MessageChannel::Call] Error: Channel error: cannot send/recv ###!!! [Parent][MessageChannel::Call] Error: Channel error: cannot send/recv ###!!! [Parent][MessageChannel::Call] Error: Channel error: cannot send/recv` ``` </details>
Author
Owner

@SkewedZeppelin commented on GitHub (Sep 26, 2020):

Change 'browser-allow-drm' to yes in /etc/firejail/firejail.config

<!-- gh-comment-id:699534174 --> @SkewedZeppelin commented on GitHub (Sep 26, 2020): Change 'browser-allow-drm' to yes in /etc/firejail/firejail.config
Author
Owner

@aberja commented on GitHub (Sep 26, 2020):

Change 'browser-allow-drm' to yes in /etc/firejail/firejail.config

Thank you for the suggestion. This change did not resolve the issue on either Firefox or Vivaldi.

The issue described above occurs on my laptop and my desktop.

I should also note that I can watch videos while running firejail on other sites such as YouTube and Vimeo.

I can also watch non drm videos from: https://demo.castlabs.com/ However the Big Buck Bunny drm videos do not play using firejail. When I try to watch the drm videos I see the following:

[1867:1438:0926/150709.816552:ERROR:cdm_module.cc(135)] CDM at /home/g752vs/.config/vivaldi/WidevineCdm/4.10.1610.0/_platform_specific/linux_x64/libwidevinecdm.so could not be loaded.
[1867:1438:0926/150709.816650:ERROR:cdm_module.cc(136)] Error: /home/g752vs/.config/vivaldi/WidevineCdm/4.10.1610.0/_platform_specific/linux_x64/libwidevinecdm.so: cannot open shared object file: Operation not permitted
<!-- gh-comment-id:699538697 --> @aberja commented on GitHub (Sep 26, 2020): > Change 'browser-allow-drm' to yes in /etc/firejail/firejail.config Thank you for the suggestion. This change did not resolve the issue on either Firefox or Vivaldi. The issue described above occurs on my laptop and my desktop. I should also note that I can watch videos while running firejail on other sites such as YouTube and Vimeo. I can also watch non drm videos from: https://demo.castlabs.com/ However the Big Buck Bunny drm videos do not play using firejail. When I try to watch the drm videos I see the following: ``` [1867:1438:0926/150709.816552:ERROR:cdm_module.cc(135)] CDM at /home/g752vs/.config/vivaldi/WidevineCdm/4.10.1610.0/_platform_specific/linux_x64/libwidevinecdm.so could not be loaded. [1867:1438:0926/150709.816650:ERROR:cdm_module.cc(136)] Error: /home/g752vs/.config/vivaldi/WidevineCdm/4.10.1610.0/_platform_specific/linux_x64/libwidevinecdm.so: cannot open shared object file: Operation not permitted ```
Author
Owner

@aberja commented on GitHub (Sep 26, 2020):

I have resolved this issue and can play videos with drm using firejail.

Since I had manually installed firejail from github, modifying the firejail.config file located in /etc/firejail/ had no affect.

The correct firejail.config file that required the change suggested by @SkewedZeppelin was located in /usr/local/etc/firejail.

<!-- gh-comment-id:699547225 --> @aberja commented on GitHub (Sep 26, 2020): I have resolved this issue and can play videos with drm using firejail. Since I had manually installed firejail from github, modifying the firejail.config file located in /etc/firejail/ had no affect. The correct firejail.config file that required the change suggested by @SkewedZeppelin was located in ```/usr/local/etc/firejail```.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2297
No description provided.