[GH-ISSUE #4954] No internet access with whitelist-run-common.inc (OpenSUSE) (resolv.conf) #2833

Closed
opened 2026-05-05 09:29:22 -06:00 by gitea-mirror · 7 comments
Owner

Originally created by @Kebron718 on GitHub (Feb 18, 2022).
Original GitHub issue: https://github.com/netblue30/firejail/issues/4954

firejail version: 0.9.68 (installed from official repos)
problem did not exist in earlier versions
Linux distro: openSUSE Leap 15.3

I updated from version 0.9.66 yesterday and lost internet access with e.g. Chromium, Firefox and Thunderbird. The programs seemed to load correctly but there was no network access whatsoever.

Switched between 0.9.68 and 0.9.64 (0.9.66 was not available any more in the openSUSE repos) and discovered that I had to uncomment every entry in

etc/firejail/whitelist-run-common.inc

in order to get internet access back.

I noticed that there is no such file in 0.9.64.

I don’t know whether this problem is limited to openSUSE.

Originally created by @Kebron718 on GitHub (Feb 18, 2022). Original GitHub issue: https://github.com/netblue30/firejail/issues/4954 firejail version: 0.9.68 (installed from official repos) problem did not exist in earlier versions Linux distro: openSUSE Leap 15.3 I updated from version 0.9.66 yesterday and lost internet access with e.g. Chromium, Firefox and Thunderbird. The programs seemed to load correctly but there was no network access whatsoever. Switched between 0.9.68 and 0.9.64 (0.9.66 was not available any more in the openSUSE repos) and discovered that I had to uncomment every entry in **etc/firejail/whitelist-run-common.inc** in order to get internet access back. I noticed that there is no such file in 0.9.64. I don’t know whether this problem is limited to openSUSE.
gitea-mirror 2026-05-05 09:29:22 -06:00
Author
Owner

@rusty-snake commented on GitHub (Feb 18, 2022):

ls -l /etc/resolv.conf?

<!-- gh-comment-id:1044094767 --> @rusty-snake commented on GitHub (Feb 18, 2022): `ls -l /etc/resolv.conf`?
Author
Owner

@Kebron718 commented on GitHub (Feb 18, 2022):

Thanks, that did it!

I should have checked the paths in etc/firejail/whitelist-run-common.inc.

Everything checks out but one line:

whitelist /run/NetworkManager/resolv.conf

does not exist in openSUSE. Instead the correct path is

whitelist /run/netconfig/resolv.conf

I guess that could easily be fixed in the SUSE repos ...

<!-- gh-comment-id:1045001765 --> @Kebron718 commented on GitHub (Feb 18, 2022): Thanks, that did it! I should have checked the paths in etc/firejail/whitelist-run-common.inc. Everything checks out but one line: whitelist /run/NetworkManager/resolv.conf does **not** exist in openSUSE. Instead the correct path is ### whitelist /run/netconfig/resolv.conf I guess that could easily be fixed in the SUSE repos ...
Author
Owner

@reinerh commented on GitHub (Feb 18, 2022):

I guess that could easily be fixed in the SUSE repos ...

That can also be fixed in firejail upstream. :-)
There are probably other distributions using netconfig.
Do you want to open a Pull Request that adds the whitelist?

<!-- gh-comment-id:1045168347 --> @reinerh commented on GitHub (Feb 18, 2022): > I guess that could easily be fixed in the SUSE repos ... That can also be fixed in firejail upstream. :-) There are probably other distributions using netconfig. Do you want to open a Pull Request that adds the whitelist?
Author
Owner

@netblue30 commented on GitHub (Feb 22, 2022):

Added a fix here: f347e88cc7

<!-- gh-comment-id:1047857832 --> @netblue30 commented on GitHub (Feb 22, 2022): Added a fix here: https://github.com/netblue30/firejail/commit/f347e88cc7c3d6d6dddce51a344adf8200c00773
Author
Owner

@powerjungle commented on GitHub (Feb 23, 2022):

Same issue is in OpenSUSE Tumbleweed and this fixes it, thanks!

<!-- gh-comment-id:1049014573 --> @powerjungle commented on GitHub (Feb 23, 2022): Same issue is in OpenSUSE Tumbleweed and this fixes it, thanks!
Author
Owner

@sebix commented on GitHub (Feb 28, 2022):

Hi,

firejail-package-maintainer in openSUSE here.

Thanks for reporting, debugging and fixing the issue!

Same issue is in OpenSUSE Tumbleweed and this fixes it, thanks!

See status update in https://bugzilla.opensuse.org/show_bug.cgi?id=1196542
I added the patch to the experimental repo, if this problem is fixed for the affected users, I will submit it to Tumbleweed official packages.

btw: firejail 0.9.68 is not part of Leap 15.3 official packages, only as experimental package, same source as for tumbleweed.

<!-- gh-comment-id:1054601479 --> @sebix commented on GitHub (Feb 28, 2022): Hi, firejail-package-maintainer in openSUSE here. Thanks for reporting, debugging and fixing the issue! > Same issue is in OpenSUSE Tumbleweed and this fixes it, thanks! See status update in https://bugzilla.opensuse.org/show_bug.cgi?id=1196542 I added the patch to the experimental repo, if this problem is fixed for the affected users, I will submit it to Tumbleweed official packages. btw: firejail 0.9.68 is not part of Leap 15.3 official packages, only as experimental package, same source as for tumbleweed.
Author
Owner

@kmk3 commented on GitHub (Mar 9, 2022):

Closing this as it seems to have been fixed by commit bb334a8fd ("openSUSE
Leap - whitelist-run-common.inc (#4954)", 2022-02-22).

<!-- gh-comment-id:1062539629 --> @kmk3 commented on GitHub (Mar 9, 2022): Closing this as it seems to have been fixed by commit bb334a8fd ("openSUSE Leap - whitelist-run-common.inc (#4954)", 2022-02-22).
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2833
No description provided.