[GH-ISSUE #4518] Musixmatch can not run under firejail #2692

New issue

Closed

opened 2026-05-05 09:21:14 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 09:21:14 -06:00

Owner

Originally created by @GreatBigWhiteWorld on GitHub (Sep 8, 2021).
Original GitHub issue: https://github.com/netblue30/firejail/issues/4518

Any idea what's the problem for musixmatch here?
firejail version 0.9.66

firejail /opt/Musixmatch/musixmatch %U
Reading profile /etc/firejail/musixmatch.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/disable-xdg.inc
Parent pid 23668, child pid 23669
Warning fcopy: skipping /etc/alternatives/libjavaplugin.so.x86_64, cannot find inode
Warning: skipping asound.conf for private /etc
Warning: skipping crypto-policies for private /etc
Private /etc installed in 9.20 ms
Private /usr/etc installed in 0.00 ms
Warning: not remounting /run/user/1000/gvfs
Child process initialized in 523.84 ms
Check failed: sys_chroot("/proc/self/fdinfo/") == 0

Parent is shutting down, bye...

Originally created by @GreatBigWhiteWorld on GitHub (Sep 8, 2021). Original GitHub issue: https://github.com/netblue30/firejail/issues/4518 Any idea what's the problem for musixmatch here? firejail version 0.9.66 ``` firejail /opt/Musixmatch/musixmatch %U Reading profile /etc/firejail/musixmatch.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-exec.inc Reading profile /etc/firejail/disable-passwdmgr.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/disable-xdg.inc Parent pid 23668, child pid 23669 Warning fcopy: skipping /etc/alternatives/libjavaplugin.so.x86_64, cannot find inode Warning: skipping asound.conf for private /etc Warning: skipping crypto-policies for private /etc Private /etc installed in 9.20 ms Private /usr/etc installed in 0.00 ms Warning: not remounting /run/user/1000/gvfs Child process initialized in 523.84 ms Check failed: sys_chroot("/proc/self/fdinfo/") == 0 Parent is shutting down, bye... ```

gitea-mirror closed this issue

2026-05-05 09:21:15 -06:00

gitea-mirror commented

2026-05-05 09:21:17 -06:00

Author

Owner

@rusty-snake commented on GitHub (Sep 8, 2021):

Check failed: sys_chroot("/proc/self/fdinfo/") == 0

seccomp -> seccomp !chroot

Maybe more: ignore caps.drop all ignore nonewprivs ignore noroot ignore protocol ignore seccomp

@rusty-snake commented on GitHub (Sep 8, 2021): > Check failed: sys_chroot("/proc/self/fdinfo/") == 0 `seccomp` -> `seccomp !chroot` Maybe more: `ignore caps.drop all` `ignore nonewprivs` `ignore noroot` `ignore protocol` `ignore seccomp`

gitea-mirror commented

2026-05-05 09:21:18 -06:00

Author

Owner

@GreatBigWhiteWorld commented on GitHub (Sep 8, 2021):

Check failed: sys_chroot("/proc/self/fdinfo/") == 0

seccomp -> seccomp !chroot

Maybe more: ignore caps.drop all ignore nonewprivs ignore noroot ignore protocol ignore seccomp

Hey, just 'seccomp !chroot' is good enough! Many thanks !
Not sure why it needs chroot though.

@GreatBigWhiteWorld commented on GitHub (Sep 8, 2021): > > Check failed: sys_chroot("/proc/self/fdinfo/") == 0 > > `seccomp` -> `seccomp !chroot` > > Maybe more: `ignore caps.drop all` `ignore nonewprivs` `ignore noroot` `ignore protocol` `ignore seccomp` Hey, just 'seccomp !chroot' is good enough! Many thanks ! Not sure why it needs chroot though.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2692

No description provided.

Rows
Columns