mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #4954] No internet access with whitelist-run-common.inc (OpenSUSE) (resolv.conf) #2833
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#2833
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Kebron718 on GitHub (Feb 18, 2022).
Original GitHub issue: https://github.com/netblue30/firejail/issues/4954
firejail version: 0.9.68 (installed from official repos)
problem did not exist in earlier versions
Linux distro: openSUSE Leap 15.3
I updated from version 0.9.66 yesterday and lost internet access with e.g. Chromium, Firefox and Thunderbird. The programs seemed to load correctly but there was no network access whatsoever.
Switched between 0.9.68 and 0.9.64 (0.9.66 was not available any more in the openSUSE repos) and discovered that I had to uncomment every entry in
etc/firejail/whitelist-run-common.inc
in order to get internet access back.
I noticed that there is no such file in 0.9.64.
I don’t know whether this problem is limited to openSUSE.
@rusty-snake commented on GitHub (Feb 18, 2022):
ls -l /etc/resolv.conf?@Kebron718 commented on GitHub (Feb 18, 2022):
Thanks, that did it!
I should have checked the paths in etc/firejail/whitelist-run-common.inc.
Everything checks out but one line:
whitelist /run/NetworkManager/resolv.conf
does not exist in openSUSE. Instead the correct path is
whitelist /run/netconfig/resolv.conf
I guess that could easily be fixed in the SUSE repos ...
@reinerh commented on GitHub (Feb 18, 2022):
That can also be fixed in firejail upstream. :-)
There are probably other distributions using netconfig.
Do you want to open a Pull Request that adds the whitelist?
@netblue30 commented on GitHub (Feb 22, 2022):
Added a fix here:
f347e88cc7@powerjungle commented on GitHub (Feb 23, 2022):
Same issue is in OpenSUSE Tumbleweed and this fixes it, thanks!
@sebix commented on GitHub (Feb 28, 2022):
Hi,
firejail-package-maintainer in openSUSE here.
Thanks for reporting, debugging and fixing the issue!
See status update in https://bugzilla.opensuse.org/show_bug.cgi?id=1196542
I added the patch to the experimental repo, if this problem is fixed for the affected users, I will submit it to Tumbleweed official packages.
btw: firejail 0.9.68 is not part of Leap 15.3 official packages, only as experimental package, same source as for tumbleweed.
@kmk3 commented on GitHub (Mar 9, 2022):
Closing this as it seems to have been fixed by commit
bb334a8fd("openSUSELeap - whitelist-run-common.inc (#4954)", 2022-02-22).