github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #4699] Problem with Tor Browser Bundle and seccomp !chroot #2753

New issue

Closed

opened 2026-05-05 09:24:58 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 09:24:58 -06:00

Owner

Originally created by @bluefire8000 on GitHub (Nov 20, 2021).
Original GitHub issue: https://github.com/netblue30/firejail/issues/4699

Hello mates,

I am using firejail with a custom profile for Tor Browser Bundle. The Tor Browser is running from ramdisk (/media/ramdisk/tor-browser_en). Everything worked well in the past.

Since I have updates TBB to the latest version 11, the Browser does not start with firejail. It works if I comment out this line in the firejail profile:

#seccomp !chroot

If I remove the "#", the browser does not start and the command line shows:
Post-exec seccomp protector enabled
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,

I am no expert and I don't really understand what "seccomp !chroot" is doing, i just copied it from the default firejail profile to my own profile (which basically is adjusted to allow TBB to run from ramdisk).

Any ideas what is going wrong? I would appreciate your help. Ty guys!

Originally created by @bluefire8000 on GitHub (Nov 20, 2021). Original GitHub issue: https://github.com/netblue30/firejail/issues/4699 Hello mates, I am using firejail with a custom profile for Tor Browser Bundle. The Tor Browser is running from ramdisk (/media/ramdisk/tor-browser_en). Everything worked well in the past. Since I have updates TBB to the latest version 11, the Browser does not start with firejail. It works if I comment out this line in the firejail profile: #seccomp !chroot If I remove the "#", the browser does not start and the command line shows: Post-exec seccomp protector enabled Seccomp list in: !chroot, check list: @default-keep, prelist: unknown, I am no expert and I don't really understand what "seccomp !chroot" is doing, i just copied it from the default firejail profile to my own profile (which basically is adjusted to allow TBB to run from ramdisk). Any ideas what is going wrong? I would appreciate your help. Ty guys!

gitea-mirror

2026-05-05 09:24:58 -06:00

closed this issue
added the
stale
label

gitea-mirror commented

2026-05-05 09:25:01 -06:00

Author

Owner

@rusty-snake commented on GitHub (Nov 20, 2021):

https://github.com/netblue30/firejail/issues/4697#issuecomment-972594995

@rusty-snake commented on GitHub (Nov 20, 2021): https://github.com/netblue30/firejail/issues/4697#issuecomment-972594995

gitea-mirror commented

2026-05-05 09:25:02 -06:00

Author

Owner

@rusty-snake commented on GitHub (Feb 13, 2022):

I'm closing here due to inactivity, please fell free to request to reopen if you still have this issue.

@rusty-snake commented on GitHub (Feb 13, 2022): I'm closing here due to inactivity, please fell free to request to reopen if you still have this issue.

gitea-mirror referenced this issue

2026-05-05 10:21:32 -06:00

[PR #2753] [MERGED] Add davfs2 secrets file to blacklist #4513

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2753

No description provided.

Rows
Columns