github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

share is empty with google chrome profiles. #2887

New issue

Closed

opened 2026-05-05 09:32:49 -06:00 by gitea-mirror · 9 comments

gitea-mirror commented

2026-05-05 09:32:49 -06:00

Owner

Originally created by @crocket on GitHub (Apr 30, 2022).
Original GitHub issue: https://github.com/netblue30/firejail/issues/5125

Description

/usr/share is empty with all google chrome profiles.

tmpfs is mounted on /usr/share.

Environment

Linux distribution and version: Gentoo Linux
Firejail version (firejail --version).

firejail version 0.9.68

Compile time support:
        - always force nonewprivs support is disabled
        - AppArmor support is enabled
        - AppImage support is enabled
        - chroot support is enabled
        - D-BUS proxy support is enabled
        - file transfer support is enabled
        - firetunnel support is disabled
        - networking support is enabled
        - output logging is enabled
        - overlayfs support is disabled
        - private-home support is enabled
        - private-cache and tmpfs as user enabled
        - SELinux support is disabled
        - user namespace support is enabled
        - X11 sandboxing support is enabled

Originally created by @crocket on GitHub (Apr 30, 2022). Original GitHub issue: https://github.com/netblue30/firejail/issues/5125 ### Description /usr/share is empty with all google chrome profiles. tmpfs is mounted on /usr/share. ### Environment - Linux distribution and version: Gentoo Linux - Firejail version (`firejail --version`). ``` firejail version 0.9.68 Compile time support: - always force nonewprivs support is disabled - AppArmor support is enabled - AppImage support is enabled - chroot support is enabled - D-BUS proxy support is enabled - file transfer support is enabled - firetunnel support is disabled - networking support is enabled - output logging is enabled - overlayfs support is disabled - private-home support is enabled - private-cache and tmpfs as user enabled - SELinux support is disabled - user namespace support is enabled - X11 sandboxing support is enabled ```

gitea-mirror

2026-05-05 09:32:49 -06:00

closed this issue
added the
duplicate

notabug
labels

gitea-mirror commented

2026-05-05 09:32:52 -06:00

Author

Owner

@crocket commented on GitHub (Apr 30, 2022):

The combination of

filedb_print(share_out, "whitelist /usr/share/", fp); in src/fbuilder/build_fs.c
ignore include whitelist-usr-share-common.inc in etc/profile-a-l/google-chrome.profile and other google chrome profiles.

led to empty /usr/share.

@crocket commented on GitHub (Apr 30, 2022): The combination of * `filedb_print(share_out, "whitelist /usr/share/", fp);` in [src/fbuilder/build_fs.c](https://github.com/netblue30/firejail/blob/9ec6288674f7473138038128c232dd198b6f509a/src/fbuilder/build_fs.c#L341-L343) * `ignore include whitelist-usr-share-common.inc` in [etc/profile-a-l/google-chrome.profile](https://github.com/netblue30/firejail/blob/9ec6288674f7473138038128c232dd198b6f509a/etc/profile-a-l/google-chrome.profile#L8-L12) and other google chrome profiles. led to empty /usr/share.

gitea-mirror commented

2026-05-05 09:32:53 -06:00

Author

Owner

@rusty-snake commented on GitHub (Apr 30, 2022):

Duplicate of #4929

@rusty-snake commented on GitHub (Apr 30, 2022): Duplicate of #4929

gitea-mirror commented

2026-05-05 09:32:55 -06:00

Author

Owner

@rusty-snake commented on GitHub (Apr 30, 2022):

Duplicate of #4965

@rusty-snake commented on GitHub (Apr 30, 2022): Duplicate of #4965

gitea-mirror commented

2026-05-05 09:32:55 -06:00

Author

Owner

@rusty-snake commented on GitHub (Apr 30, 2022):

Fixed by 56ebc8ac98

@rusty-snake commented on GitHub (Apr 30, 2022): Fixed by 56ebc8ac984a8fc6f4470ab507f7bc0fd3720bbd

gitea-mirror commented

2026-05-05 09:32:56 -06:00

Author

Owner

@rusty-snake commented on GitHub (Apr 30, 2022):

filedb_print(share_out, "whitelist /usr/share/", fp); in src/fbuilder/build_fs.c

If you use a custom profile you should post it.

@rusty-snake commented on GitHub (Apr 30, 2022): > `filedb_print(share_out, "whitelist /usr/share/", fp);` in [src/fbuilder/build_fs.c](https://github.com/netblue30/firejail/blob/9ec6288674f7473138038128c232dd198b6f509a/src/fbuilder/build_fs.c#L341-L343) If you use a custom profile you should post it.

gitea-mirror commented

2026-05-05 09:32:57 -06:00

Author

Owner

@crocket commented on GitHub (Apr 30, 2022):

I didn't use a custom profile. By the way, 56ebc8ac98 doesn't fix the issue.

This issue is not a duplicate of either https://github.com/netblue30/firejail/issues/4929 or https://github.com/netblue30/firejail/issues/4965

My suggested solution to this issue is to remove ignore include whitelist-usr-share-common.inc in google chrome profiles. It's okay to remove ignore include whitelist-runuser-common.inc, too.

When /usr/share is empty, google chrome has various issues.

@crocket commented on GitHub (Apr 30, 2022): I didn't use a custom profile. By the way, https://github.com/netblue30/firejail/commit/56ebc8ac984a8fc6f4470ab507f7bc0fd3720bbd doesn't fix the issue. This issue is not a duplicate of either https://github.com/netblue30/firejail/issues/4929 or https://github.com/netblue30/firejail/issues/4965 My suggested solution to this issue is to remove `ignore include whitelist-usr-share-common.inc` in google chrome profiles. It's okay to remove `ignore include whitelist-runuser-common.inc`, too. When /usr/share is empty, google chrome has various issues.

gitea-mirror commented

2026-05-05 09:32:58 -06:00

Author

Owner

@rusty-snake commented on GitHub (May 1, 2022):

I didn't use a custom profile.

Why did you referenced fbuilder then? filedb_print(share_out, "whitelist /usr/share/", fp); is only executed if you build a custom profile.

This issue is not a duplicate of either https://github.com/netblue30/firejail/issues/4929 or https://github.com/netblue30/firejail/issues/4965

chrom* has issues with firejail 0.9.68 because of empty /usr/share. Sounds very close.

My suggested solution to this issue is to remove ignore include whitelist-usr-share-common.inc in google chrome profiles. It's okay to remove ignore include whitelist-runuser-common.inc, too.

If you tested this, open a PR. The only reason why they are disabled is that no-one has tested so far.

When /usr/share is empty, google chrome has various issues.

https://github.com/netblue30/firejail/issues/4929 or https://github.com/netblue30/firejail/issues/4965

By the way, 56ebc8ac98 doesn't fix the issue.

Can you follow the issue template. Mainly --noprofile, the checklist and log output.

Reopening for now.

@rusty-snake commented on GitHub (May 1, 2022): > I didn't use a custom profile. Why did you referenced fbuilder then? `filedb_print(share_out, "whitelist /usr/share/", fp);` is only executed if you build a custom profile. > This issue is not a duplicate of either https://github.com/netblue30/firejail/issues/4929 or https://github.com/netblue30/firejail/issues/4965 chrom* has issues with firejail 0.9.68 because of empty /usr/share. Sounds very close. > My suggested solution to this issue is to remove ignore include whitelist-usr-share-common.inc in google chrome profiles. It's okay to remove ignore include whitelist-runuser-common.inc, too. If you tested this, open a PR. The only reason why they are disabled is that no-one has tested so far. > When /usr/share is empty, google chrome has various issues. https://github.com/netblue30/firejail/issues/4929 or https://github.com/netblue30/firejail/issues/4965 > By the way, https://github.com/netblue30/firejail/commit/56ebc8ac984a8fc6f4470ab507f7bc0fd3720bbd doesn't fix the issue. Can you follow the issue template. Mainly `--noprofile`, the checklist and log output. Reopening for now.

gitea-mirror commented

2026-05-05 09:32:59 -06:00

Author

Owner

@crocket commented on GitHub (May 1, 2022):

By the way, what is a custom profile? I just used /etc/firejail/google-chrome.profile.

@crocket commented on GitHub (May 1, 2022): By the way, what is a custom profile? I just used /etc/firejail/google-chrome.profile.

gitea-mirror commented

2026-05-05 09:32:59 -06:00

Author

Owner

@rusty-snake commented on GitHub (May 1, 2022):

Any profile you create/edit by hand in an editor or generated with a program/script. i.e. every profile not included in your firejail installation package.

@rusty-snake commented on GitHub (May 1, 2022): Any profile you create/edit by hand in an editor or generated with a program/script. i.e. every profile not included in your firejail installation package.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2887

No description provided.

Rows
Columns