mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #3687] start-tor-browser doesn't open with any profile #2322
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#2322
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @1984-is-1984 on GitHub (Oct 23, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3687
Dear Guys,
I have an issue, that TB, actually start-tor-browser won't start if I use any profile with firejail.
At the end, I want to use @rusty-snake's profile, but the thing only starts if I use the option --noprofile.
Operating system: Linux Mint Ulyana,
Firejail version: 0.9.62 from the Mint repo
TBB: 10.0.2 (but 10.0.1 didn't fly either)
Staring firejail with the firefox profile gives the following output:
Pretty similar, when trying to start with the normal global profile or with the firejailed-tor-browser profile (that gives a different output of course).
Starting with --noprofile:
Do you have any hints, where to look, what to check?
Thank you very much in advance!
@rusty-snake commented on GitHub (Oct 23, 2020):
Hints:
firefox.profiledoesn't allow exec inside $HOME by default. However you don't need to use it since there profiles for tbb.globals.localsuch asapparmorwill also make $HOME noexec. What's in yourglobals.local?firefox.profile,tor-browser*.profile,torbrowser-launcher.profile,start-tor-browser.profileandstart-tor-browser.desktop.profileare all whitelisting profiles which do notwhitelist ${HOME}/.firejailed-tor-browser(or what ever).@1984-is-1984 commented on GitHub (Oct 23, 2020):
Wow, that's an incredibly quick response and I really admire that!
Ok, so, I anyway want to use the TB with your profile for the 0.9.62 firejail version, so, I'll list all the paths and contents of all files:
1st:
firejailed-tor-browser.profileunder/home/userx/.config/firejail/content:2nd:
firejailed-tor-browser.localunder/home/userx/.config/firejail/content:3rd:
globals.localunder/etc/firejail/content:blacklist ${HOME}/.firejailed-tor-browser4th:
disbale-programs.localunder/home/userx/.config/firejail/content:blacklist ${HOME}/.firejailed-tor-browserShould I whitelist
${HOME}/.firejailed-tor-browserin theglobals.localunder/etc/firejail/instead of blacklisting it?@rusty-snake commented on GitHub (Oct 23, 2020):
With my profile you need use
firejail --profile=firejailed-tor-browser ${HOME}/Browser/start-tor-browser.--profileis required to use this profileprivate ${HOME}/.firejailed-tor-browserthe start-tor-browser is found inside the sandbox underBrowser/start-tor-browserinstead of.firejailed-tor-browser/Browser/start-tor-browser. (OT: and because of theprivatehasinclude whitelist-common.incno effect, I should update the comment)NO, adding a
whitelistinglobals.localwould break all blacklisting-profiles.noblacklist ${HOME}/.firejailed-tor-browsercomes afterinclude globals.local, which means that theblacklistfrom globals.local is applied. I'm not sure if the break becauseprivateis used, but maybe it does.@1984-is-1984 commented on GitHub (Oct 23, 2020):
I really appreciate your support @rusty-snake !!!
OK, I've tried your command and it actually worked in some sort of way but firejail still did quit.
So, the command is following:
firejail --profile=firejailed-tor-browser ${HOME}/Browser/start-tor-browserResult in the terminal:
So now, it's just quitting without a hint.
Should I debug it?
@rusty-snake commented on GitHub (Oct 24, 2020):
Maybe there is something in the syslog, but if not you need to comment the profile line for line.
@rusty-snake commented on GitHub (Nov 9, 2020):
Any progress?
@bbhtt commented on GitHub (Nov 11, 2020):
I think this is due to the default apparmor profile that comes with torbrowser-launcher. Any firejail profiles for torbrowser: comment
apparmor; dosudo aa-teardown, then launch torbrowsr/torbrowser-launcher under firejail.This is a personal profile (https://termbin.com/dk71, globals.local has hardened malloc) that I use for torbrowser-launcher or the tar.xz torbrowser downloaded separately and extracted to
${HOME}/.TorBrowser. In either case apparmor creates problem specifically the one shipped with torbrowser-launcher.@rusty-snake commented on GitHub (Dec 16, 2020):
I'm closing here due to inactivity, please fell free to request to reopen if you still have this issue.