github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #366] SlimJet Browser #261

New issue

Closed

opened 2026-05-05 05:27:17 -06:00 by gitea-mirror · 6 comments

gitea-mirror commented

2026-05-05 05:27:17 -06:00

Owner

Originally created by @Felemur on GitHub (Mar 14, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/366

Firejail works well with Chromium, FireFox and Pale Moon. However there seems to be a problem with SlimJet, a browser based on the Chromium project. The browser, when launched under Firejail, fails to show up in the panel of running programs or open a window, but does show up as a running process under the System Monitor.

Linux Mint, Cinnamon, 17.3

Originally created by @Felemur on GitHub (Mar 14, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/366 Firejail works well with Chromium, FireFox and Pale Moon. However there seems to be a problem with SlimJet, a browser based on the Chromium project. The browser, when launched under Firejail, fails to show up in the panel of running programs or open a window, but does show up as a running process under the System Monitor. Linux Mint, Cinnamon, 17.3

gitea-mirror

2026-05-05 05:27:17 -06:00

closed this issue
added the
enhancement
label

gitea-mirror commented

2026-05-05 05:27:23 -06:00

Author

Owner

@netblue30 commented on GitHub (Mar 16, 2016):

I added support for it on the master branch. The profile file is flashpeak-slimjet.profile in /etc/firejail directory.

https://github.com/netblue30/firejail/blob/master/etc/flashpeak-slimjet.profile

To start the browser, the command is:

$ firejail flashpeak-slimjet --no-sandbox

@netblue30 commented on GitHub (Mar 16, 2016): I added support for it on the master branch. The profile file is flashpeak-slimjet.profile in /etc/firejail directory. https://github.com/netblue30/firejail/blob/master/etc/flashpeak-slimjet.profile To start the browser, the command is: ``` $ firejail flashpeak-slimjet --no-sandbox ```

gitea-mirror commented

2026-05-05 05:27:26 -06:00

Author

Owner

@Felemur commented on GitHub (Mar 16, 2016):

Thank you for doing that. However, I think I'm doing something wrong (forgive me, I'm fairly new to Linux). I tried to run it in the GUI, and Slimjet would not start, so I tried running it from the Terminal and this is what I got:

**davidm@davidm-Satellite-L770D ~ $ firejail flashpeak-slimjet --no-sandbox
Reading profile /etc/firejail/generic.profile
Reading profile /etc/firejail/disable-mgmt.inc
Reading profile /etc/firejail/disable-secret.inc
Reading profile /etc/firejail/disable-common.inc

** Note: you can use --noprofile to disable generic.profile **

Parent pid 7179, child pid 7180

Child process initialized
[2:2:0316/132324:ERROR:browser_main_loop.cc(206)] Running without the SUID sandbox! See https://code.google.com/p/chromium/wiki/LinuxSUIDSandboxDevelopment for more information on developing with the sandbox on.
[2:15:0316/132324:ERROR:address_tracker_linux.cc(153)] Could not create NETLINK socket: Operation not supported
[2:27:0316/132325:ERROR:nss_util.cc(738)] Error initializing NSS with a persistent database (sql:/home/davidm/.pki/nssdb): NSS error code: -8174
libudev: udev_monitor_new_from_netlink_fd: error getting socket: Operation not supported
[0316/132325:ERROR:nacl_helper_linux.cc(310)] NaCl helper process running without a sandbox!
Most likely you need to configure your SUID sandbox correctly

parent is shutting down, bye...
davidm@davidm-Satellite-L770D ~ $

@Felemur commented on GitHub (Mar 16, 2016): Thank you for doing that. However, I think I'm doing something wrong (forgive me, I'm fairly new to Linux). I tried to run it in the GUI, and Slimjet would not start, so I tried running it from the Terminal and this is what I got: **davidm@davidm-Satellite-L770D ~ $ firejail flashpeak-slimjet --no-sandbox Reading profile /etc/firejail/generic.profile Reading profile /etc/firejail/disable-mgmt.inc Reading profile /etc/firejail/disable-secret.inc Reading profile /etc/firejail/disable-common.inc *\* Note: you can use --noprofile to disable generic.profile ** Parent pid 7179, child pid 7180 Child process initialized [2:2:0316/132324:ERROR:browser_main_loop.cc(206)] Running without the SUID sandbox! See https://code.google.com/p/chromium/wiki/LinuxSUIDSandboxDevelopment for more information on developing with the sandbox on. [2:15:0316/132324:ERROR:address_tracker_linux.cc(153)] Could not create NETLINK socket: Operation not supported [2:27:0316/132325:ERROR:nss_util.cc(738)] Error initializing NSS with a persistent database (sql:/home/davidm/.pki/nssdb): NSS error code: -8174 libudev: udev_monitor_new_from_netlink_fd: error getting socket: Operation not supported [0316/132325:ERROR:nacl_helper_linux.cc(310)] NaCl helper process running without a sandbox! Most likely you need to configure your SUID sandbox correctly parent is shutting down, bye... davidm@davidm-Satellite-L770D ~ $ **

gitea-mirror commented

2026-05-05 05:27:28 -06:00

Author

Owner

@netblue30 commented on GitHub (Mar 16, 2016):

Without installing the new version, I think this should work:

$ firejail --ignore=protocol flashpeak-slimjet --no-sandbox

@netblue30 commented on GitHub (Mar 16, 2016): Without installing the new version, I think this should work: ``` $ firejail --ignore=protocol flashpeak-slimjet --no-sandbox ```

gitea-mirror commented

2026-05-05 05:27:29 -06:00

Author

Owner

@Felemur commented on GitHub (Mar 16, 2016):

Yes, that did work, thank you. I did get a warning from Slimjet when starting - see attached image:

I creatied a file in /etc/firejail called flashpeak-slimjet.profile with the code provided (https://github.com/netblue30/firejail/blob/master/etc/flashpeak-slimjet.profile), but that did not work when I tried to launch the program - it did not launch. Again, I might be making a fundamental mistake due to ignorance. BTW, I tried launching with both firejail --ignore=protocol flashpeak-slimjet --no-sandbox** and ** firejail flashpeak-slimjet --no-sandbox. When I removed the flashpeak-slimjet.profile from /etc/firejail and retried $ firejail --ignore=protocol flashpeak-slimjet --no-sandbox, it did work again.

I will update to the new Firejail version with the new profile when out and let you know how it works - I have the 2016-02-04 version installed and will update as soon as the newer version is out with the Slimjet profile.

@Felemur commented on GitHub (Mar 16, 2016): Yes, that did work, thank you. I did get a warning from Slimjet when starting - see attached image: ![slimjet screenshot from 2016-03-16 17 50 37](https://cloud.githubusercontent.com/assets/17836628/13830908/5c7f2ee0-eba6-11e5-8960-40c3f6b87b7e.png) I creatied a file in _/etc/firejail_ called **flashpeak-slimjet.profile** with the code provided (https://github.com/netblue30/firejail/blob/master/etc/flashpeak-slimjet.profile), but that did not work when I tried to launch the program - it did not launch. Again, I might be making a fundamental mistake due to ignorance. BTW, I tried launching with both **$ firejail --ignore=protocol flashpeak-slimjet --no-sandbox** and **$ firejail flashpeak-slimjet --no-sandbox**. When I removed the **flashpeak-slimjet.profile** from _/etc/firejail_ and retried **$ firejail --ignore=protocol flashpeak-slimjet --no-sandbox**, it did work again. I will update to the new Firejail version with the new profile when out and let you know how it works - I have the 2016-02-04 version installed and will update as soon as the newer version is out with the Slimjet profile.

gitea-mirror commented

2026-05-05 05:27:31 -06:00

Author

Owner

@netblue30 commented on GitHub (Mar 17, 2016):

Let's leave it open as an enhancement. I'll look into it, thanks!

@netblue30 commented on GitHub (Mar 17, 2016): Let's leave it open as an enhancement. I'll look into it, thanks!

gitea-mirror commented

2026-05-05 05:27:32 -06:00

Author

Owner

@netblue30 commented on GitHub (Jun 1, 2016):

It will stay as is. SlimJet is a proprietary browser, no source code available. In order for them to use their own sandbox, they need root privileges. Since firejail take root privileges away, they end up showing the message you posted above.

@netblue30 commented on GitHub (Jun 1, 2016): It will stay as is. SlimJet is a proprietary browser, no source code available. In order for them to use their own sandbox, they need root privileges. Since firejail take root privileges away, they end up showing the message you posted above.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#261

No description provided.

Rows
Columns