github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6

[GH-ISSUE #6162] gwenview: Cannot access images on sftp:// URI #3205

New issue
Open
opened 2026-05-05 09:49:20 -06:00 by gitea-mirror · 4 comments
gitea-mirror commented 2026-05-05 09:49:20 -06:00
Owner
Copy link

Originally created by @minhng99 on GitHub (Jan 21, 2024).
Original GitHub issue: https://github.com/netblue30/firejail/issues/6162

Description

Gwenview showing error Socket create failed: Operation not supported when attempt to open any image with the sftp:// URI.

Steps to Reproduce

Steps to reproduce the behavior

  1. Open Dolphin, access a remote sftp server that have pictures in it.
  2. Attempt to open said picture using Gwenview

or

Run Gwenview with this command
/usr/bin/firejail /usr/bin/gwenview sftp://root@192.168.1.20/picture.jpg

Expected behavior

The picture should be displayed normally.

Actual behavior

The picture never loads, Gwenview shows Socket create failed: Operation not supported

Behavior without a profile

The application works normally.

Additional context

Environment

  • Linux distribution and version Arch Linux
  • Firejail version 0.9.72

Checklist

  • The issues is caused by firejail (i.e. running the program by path (e.g. /usr/bin/vlc) "fixes" it).
  • I can reproduce the issue without custom modifications (e.g. globals.local).
  • The program has a profile. (If not, request one in https://github.com/netblue30/firejail/issues/1139)
  • The profile (and redirect profile if exists) hasn't already been fixed upstream.
  • I have performed a short search for similar issues (to avoid opening a duplicate).
    • I'm aware of browser-allow-drm yes/browser-disable-u2f no in firejail.config to allow DRM/U2F in browsers.
  • I used --profile=PROFILENAME to set the right profile. (Only relevant for AppImages)

Log

Output of LC_ALL=C firejail /path/to/program 

Reading profile /etc/firejail/gwenview.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/disable-shell.inc
Reading profile /etc/firejail/whitelist-run-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 13733, child pid 13734
45 programs installed in 105.49 ms
Warning: skipping alternatives for private /etc
Warning: skipping kde4rc for private /etc
Warning: skipping kde5rc for private /etc
Warning: skipping ld.so.preload for private /etc
Private /etc installed in 5.17 ms
Private /usr/etc installed in 0.00 ms
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Warning: not remounting /home/user/.ssh/authorized_keys
Warning: not remounting /run/user/1000/doc
Warning: not remounting /run/user/1000/kio-fuse-LcPmjF
Warning: cleaning all supplementary groups
Child process initialized in 148.88 ms
kf.config.core: Created a KConfigGroup on an inaccessible config location "baloofilerc" "Basic Settings"
UdevQt: unable to create udev monitor connection
kf.i18n.kuit: "Unknown subcue ':whatsthis,' in UI marker in context {@info:whatsthis, %1 the action's text}."
kf.config.core: Created a KConfigGroup on an inaccessible config location "baloofilerc" "Basic Settings"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-aptus-mos"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-arq"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-bay"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-bmq"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-cap"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-cine"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-cs1"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-dc2"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-drf"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-dxo"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-epson-eip"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-epson-erf"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-fff"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-hasselblad-3fr"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-iiq"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-kodak-dcs"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-kodak-kc2"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-mamiya-mef"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-mfw"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-minolta-mdc"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-mng"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-obm"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-ori"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-ptx"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-pxn"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-qtk"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-r3d"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-raw"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-rdc"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-rwl"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-rwz"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-samsung-srw"
org.kde.kdegraphics.gwenview.lib: Unresolved mime type  "image/x-sti"
org.kde.kdegraphics.gwenview.lib: Unresolved raw mime type  "image/x-samsung-srw"
kf.config.core: Created a KConfigGroup on an inaccessible config location "kwinrc" "org.kde.kdecoration2"
kf.kio.core: "Socket create failed: Operation not supported"

Output of LC_ALL=C firejail --debug /path/to/program

Originally created by @minhng99 on GitHub (Jan 21, 2024). Original GitHub issue: https://github.com/netblue30/firejail/issues/6162 <!-- See the following links for help with formatting: https://guides.github.com/features/mastering-markdown/ https://docs.github.com/en/github/writing-on-github/getting-started-with-writing-and-formatting-on-github/basic-writing-and-formatting-syntax --> ### Description Gwenview showing error `Socket create failed: Operation not supported` when attempt to open any image with the sftp:// URI. ### Steps to Reproduce _Steps to reproduce the behavior_ 1. Open Dolphin, access a remote sftp server that have pictures in it. 2. Attempt to open said picture using Gwenview or Run Gwenview with this command `/usr/bin/firejail /usr/bin/gwenview sftp://root@192.168.1.20/picture.jpg` ### Expected behavior The picture should be displayed normally. ### Actual behavior The picture never loads, Gwenview shows `Socket create failed: Operation not supported` ### Behavior without a profile The application works normally. ### Additional context ### Environment - Linux distribution and version `Arch Linux` - Firejail version 0.9.72 ### Checklist <!-- Note: Items are checked with an "x", like so: - [x] This is a checked item. --> - [x] The issues is caused by firejail (i.e. running the program by path (e.g. `/usr/bin/vlc`) "fixes" it). - [x] I can reproduce the issue without custom modifications (e.g. globals.local). - [x] The program has a profile. (If not, request one in `https://github.com/netblue30/firejail/issues/1139`) - [ ] The profile (and redirect profile if exists) hasn't already been fixed [upstream](https://github.com/netblue30/firejail/tree/master/etc). - [x] I have performed a short search for similar issues (to avoid opening a duplicate). - [ ] I'm aware of `browser-allow-drm yes`/`browser-disable-u2f no` in `firejail.config` to allow DRM/U2F in browsers. - [ ] I used `--profile=PROFILENAME` to set the right profile. (Only relevant for AppImages) ### Log <details> <summary>Output of <code>LC_ALL=C firejail /path/to/program</code></summary> <p> ``` Reading profile /etc/firejail/gwenview.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-exec.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/disable-shell.inc Reading profile /etc/firejail/whitelist-run-common.inc Reading profile /etc/firejail/whitelist-var-common.inc Parent pid 13733, child pid 13734 45 programs installed in 105.49 ms Warning: skipping alternatives for private /etc Warning: skipping kde4rc for private /etc Warning: skipping kde5rc for private /etc Warning: skipping ld.so.preload for private /etc Private /etc installed in 5.17 ms Private /usr/etc installed in 0.00 ms Warning: /sbin directory link was not blacklisted Warning: /usr/sbin directory link was not blacklisted Warning: not remounting /home/user/.ssh/authorized_keys Warning: not remounting /run/user/1000/doc Warning: not remounting /run/user/1000/kio-fuse-LcPmjF Warning: cleaning all supplementary groups Child process initialized in 148.88 ms kf.config.core: Created a KConfigGroup on an inaccessible config location "baloofilerc" "Basic Settings" UdevQt: unable to create udev monitor connection kf.i18n.kuit: "Unknown subcue ':whatsthis,' in UI marker in context {@info:whatsthis, %1 the action's text}." kf.config.core: Created a KConfigGroup on an inaccessible config location "baloofilerc" "Basic Settings" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-aptus-mos" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-arq" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-bay" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-bmq" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-cap" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-cine" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-cs1" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-dc2" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-drf" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-dxo" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-epson-eip" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-epson-erf" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-fff" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-hasselblad-3fr" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-iiq" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-kodak-dcs" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-kodak-kc2" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-mamiya-mef" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-mfw" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-minolta-mdc" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-mng" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-obm" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-ori" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-ptx" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-pxn" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-qtk" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-r3d" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-raw" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-rdc" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-rwl" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-rwz" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-samsung-srw" org.kde.kdegraphics.gwenview.lib: Unresolved mime type "image/x-sti" org.kde.kdegraphics.gwenview.lib: Unresolved raw mime type "image/x-samsung-srw" kf.config.core: Created a KConfigGroup on an inaccessible config location "kwinrc" "org.kde.kdecoration2" kf.kio.core: "Socket create failed: Operation not supported" ``` </p> </details> <details> <summary>Output of <code>LC_ALL=C firejail --debug /path/to/program</code></summary> <p> <script src="https://gist.github.com/minhng99/9d90701e12d8dc8fe44fbe5a0e1ef199.js"></script> </p> </details>
gitea-mirror added the
needinfo
 label 2026-05-05 09:49:20 -06:00
gitea-mirror commented 2026-05-05 09:49:22 -06:00
Author
Owner
Copy link

@rusty-snake commented on GitHub (Jan 21, 2024):

Socket create failed: Operation not supported

protocol inet,inet6

<!-- gh-comment-id:1902607241 --> @rusty-snake commented on GitHub (Jan 21, 2024): > Socket create failed: Operation not supported `protocol inet,inet6`
gitea-mirror commented 2026-05-05 09:49:24 -06:00
Author
Owner
Copy link

@minhng99 commented on GitHub (Jan 21, 2024):

Socket create failed: Operation not supported

protocol inet,inet6

Yeah, that worked... but there seems to be a problem because the server is accessed with SSH key, therefore the .ssh has to be whitelisted which isn't ideal :(

also, the ssh key askpass dialog isn't click-able or type-able for some reason.

Do you have another idea?

<!-- gh-comment-id:1902609879 --> @minhng99 commented on GitHub (Jan 21, 2024): > > Socket create failed: Operation not supported > > `protocol inet,inet6` Yeah, that worked... but there seems to be a problem because the server is accessed with SSH key, therefore the `.ssh` has to be whitelisted which isn't ideal :( also, the ssh key askpass dialog isn't click-able or type-able for some reason. Do you have another idea?
gitea-mirror commented 2026-05-05 09:49:25 -06:00
Author
Owner
Copy link

@rusty-snake commented on GitHub (Jan 21, 2024):

also, the ssh key askpass dialog isn't click-able or type-able for some reason.

Trial and error it down. Maybe one of

ignore include disable-common.inc
ignore include disable-shell.inc

ignore private-bin
ignore private-etc
<!-- gh-comment-id:1902620283 --> @rusty-snake commented on GitHub (Jan 21, 2024): > also, the ssh key askpass dialog isn't click-able or type-able for some reason. Trial and error it down. Maybe one of ``` ignore include disable-common.inc ignore include disable-shell.inc ignore private-bin ignore private-etc ```
gitea-mirror commented 2026-05-05 09:49:26 -06:00
Author
Owner
Copy link

@kmk3 commented on GitHub (Jan 22, 2024):

@minhng99 on Jan 21:

Socket create failed: Operation not supported

protocol inet,inet6

Yeah, that worked... but there seems to be a problem because the server is
accessed with SSH key, therefore the .ssh has to be whitelisted which isn't
ideal :(

Does it work if you add the key to ssh-agent and allow access to the ssh-agent
socket in the profile?

The socket is usually in this path:

noblacklist /tmp/ssh-*
<!-- gh-comment-id:1904523998 --> @kmk3 commented on GitHub (Jan 22, 2024): @minhng99 [on Jan 21](https://github.com/netblue30/firejail/issues/6162#issuecomment-1902609879): > > > Socket create failed: Operation not supported > > > > `protocol inet,inet6` > > Yeah, that worked... but there seems to be a problem because the server is > accessed with SSH key, therefore the `.ssh` has to be whitelisted which isn't > ideal :( Does it work if you add the key to ssh-agent and allow access to the ssh-agent socket in the profile? The socket is usually in this path: ``` noblacklist /tmp/ssh-* ```
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
master
serialize_remounts_v2
landlock_v4
landlock
release-0.9.64
release-0.9.62
gitlab_ci
LTSbase
fred_ctests
docs
0.9.80
0.9.80-rc1
0.9.78
0.9.76
0.9.76-rc4
0.9.76-rc3
0.9.76-rc2
0.9.76-rc1
0.9.74
landlock-split
0.9.72
0.9.72rc1
0.9.70
0.9.68
0.9.68rc1
0.9.66
0.9.66rc1
0.9.64.4
0.9.64.2
0.9.64
0.9.64rc1
0.9.62.4
0.9.62.2
0.9.62
0.9.56.2-LTS
0.9.60
0.9.60-rc1
0.9.58.2
0.9.58
0.9.58-rc1
0.9.56-LTS-release
0.9.56-LTS
0.9.56
0.9.56-rc1
0.9.54
0.9.54-rc2
0.9.54-rc1
0.9.52
0.9.38.12
0.9.50
0.9.50-rc1
0.9.48
0.9.46
0.9.46-rc1
0.9.44.10
0.9.44.8
0.9.44.6
0.9.38.10
0.9.44.4
0.9.38.8
0.9.44.2
0.9.44
0.9.44-rc1
0.9.38.4
0.9.42
0.9.42-rc2
0.9.38.2
0.9.42-rc1
disable-globalcfg
0.9.40
0.9.40-rc1
0.9.38
0.9.38-rc1
0.9.36
0.9.36-rc1
0.9.34
0.9.34-rc1
0.9.32
0.9.32-rc1
0.9.30
0.9.30-rc1
Labels
Clear labels   
LTS merge

   
LTS merge

   
bug

   
bug

   
converted-to-discussion

   
doc-todo

   
documentation

   
duplicate

   
enhancement

   
file-transfer

   
firecfg

   
firejail-in-firejail

   
firetools

   
graphics

   
help wanted

   
information_old

   
installation

   
invalid

   
modif

   
moved

   
needinfo

   
networking

   
notabug

   
notourbug

   
old-version

   
overlayfs

   
packaging

   
profile-request

   
pull-request

Mirrored from GitHub Pull Request

  
question

   
question_old

   
removal

   
runtime-permissions

   
sandbox-ipc

   
security

   
stale

   
wiki

   
wiki

   
wontfix

   
wordpress

   
workaround
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3205
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?