mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #5091] Nextcloud fails to connect to socket bus_0 #2876
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#2876
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @nidamanx on GitHub (Apr 4, 2022).
Original GitHub issue: https://github.com/netblue30/firejail/issues/5091
Description
Nextcloud starts but fails to connect to local folders
Steps to Reproduce
$ firejail /usr/bin/nextcloud
Expected behavior
Use the sandbox
Actual behavior
Starts in a jail but fails to connect to socket. So it freeze bofore to do its usual job
Behavior without a profile
Doesn't start at allUPDATE: Start without firejail (as usual) and with --noprofile
Additional context
If I start nextcloud without firejail (from terminal or GUI), all is fine
if I remove custom profile .config/firejail/nextcloud.local, nextcloud fails in firejail too
Environment
Checklist
/usr/bin/vlc) "fixes" it).https://github.com/netblue30/firejail/issues/1139)browser-allow-drm yes/browser-disable-u2f noinfirejail.configto allow DRM/U2F in browsers.--profile=PROFILENAMEto set the right profile. (Only relevant for AppImages)Log
Output of
LC_ALL=C firejail /path/to/programOutput of
LC_ALL=C firejail --debug /path/to/program@rusty-snake commented on GitHub (May 23, 2022):
What's in it?
@rusty-snake commented on GitHub (May 23, 2022):
I think we have actually zero testing with accessibility toolkits and firejail but if you need to use it start with whitelisting it's socket (e.g.
whitelist ${RUNUSER}/at-spi). Though IDK if things like screen-readers fail on other sandbox restrictions.@nidamanx commented on GitHub (May 23, 2022):
@rusty-snake commented on GitHub (Jun 8, 2022):
Can you try with
--profile=noprofile.profile.Do you have any other application inside firejail where accessibility toolkits are working?
@nidamanx commented on GitHub (Jun 9, 2022):
It works with this output
@rusty-snake commented on GitHub (Jun 9, 2022):
And is does not work, correct? Then is nextcloud incompatible with firejail.
@nidamanx commented on GitHub (Jun 9, 2022):
Yes, it works!
Sync is going well.
Sorry. Maybe my last message was not clear enough.
@rusty-snake commented on GitHub (Jun 9, 2022):
Can you then try with commands from noprofile.profile are required. i.e.
firejail --noprofile --allusers --writable-run-user … /usr/bin/nextcloud@nidamanx commented on GitHub (Jun 9, 2022):
Every single parameter (even using one by one) works well using
--noprofileMakes it sense to try them with the
nextcloud.profileor we have a better way to procede?@rusty-snake commented on GitHub (Jun 9, 2022):
But
--noprofileitself does not work?@nidamanx commented on GitHub (Jun 9, 2022):
firejail --noprofile /usr/bin/nextcloudworks now :-)I have to update the first message of this thread (it was some months ago and I forgot it). Probably a sw update
@rusty-snake commented on GitHub (Jun 9, 2022):
If there is no error logged in your syslog, start to comment stuff in nextcloud.profile until you find the problem.
@rusty-snake commented on GitHub (Oct 30, 2022):
I'm closing here due to inactivity, please fell free to request to reopen if you still have this issue.