github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6

[GH-ISSUE #6484] firefox: tts fails in reader view: cannot access espeak-ng #3288

New issue
Open
opened 2026-05-05 09:53:30 -06:00 by gitea-mirror · 5 comments
gitea-mirror commented 2026-05-05 09:53:30 -06:00
Owner
Copy link

Originally created by @Liorst4 on GitHub (Sep 21, 2024).
Original GitHub issue: https://github.com/netblue30/firejail/issues/6484

Description

When using reader view in firefox, the text to speech feature will fail, because it can't access espeak-ng and its data files.
Firefox on linux uses speech-dispatcher for text to speech.
speech-dispatcher may use espeak-ng (I think it has other backends).

So firefox needs to be able to access the espeak-ng binary and its data files.

https://freebsoft.org/speechd
https://github.com/espeak-ng/espeak-ng

Steps to Reproduce

Run firefox under firejail.
Find an article with lots of text, use the reader view button.
In reader view press the headphones buttons and then the play buttons.

https://support.mozilla.org/en-US/kb/firefox-reader-view-clutter-free-web-pages

Expected behavior

Firefox should use espeak-ng to play a reading of the text.

Actual behavior

Speech dispatcher will play an error message about not being able to find any modules.
Something along the lines of "Its seems like your speech dispatcher is working but none of its sound modules are"

Additional context

I tried to play around with the profile config files.
I was able to make the text to speech work, but it broke other stuff, so this solution is not PR worthy.

noblacklist /usr/bin/espeak-ng
noblacklist /usr/share/espeak-ng-data
noblacklist /usr/share/speech-dispatcher
noblacklist /etc/speech-dispatcher
noblacklist /usr/bin/speech-dispatcher
noblacklist /usr/bin/spd-conf
noblacklist /usr/bin/spd-say
noblacklist /usr/bin/spdsend

include /etc/firejail/firefox.profile

whitelist /usr/share/espeak-ng-data
whitelist /usr/share/speech-dispatcher
whitelist /etc/speech-dispatcher

Checklist

  • The issues is caused by firejail (i.e. running the program by path (e.g. /usr/bin/vlc) "fixes" it).
  • I can reproduce the issue without custom modifications (e.g. globals.local).
  • The program has a profile. (If not, request one in https://github.com/netblue30/firejail/issues/1139)
  • The profile (and redirect profile if exists) hasn't already been fixed upstream.
  • I have performed a short search for similar issues (to avoid opening a duplicate).
    • I'm aware of browser-allow-drm yes/browser-disable-u2f no in firejail.config to allow DRM/U2F in browsers.
  • I used --profile=PROFILENAME to set the right profile. (Only relevant for AppImages)
Originally created by @Liorst4 on GitHub (Sep 21, 2024). Original GitHub issue: https://github.com/netblue30/firejail/issues/6484 ### Description When using reader view in firefox, the text to speech feature will fail, because it can't access espeak-ng and its data files. Firefox on linux uses speech-dispatcher for text to speech. speech-dispatcher may use espeak-ng (I think it has other backends). So firefox needs to be able to access the `espeak-ng` binary and its data files. https://freebsoft.org/speechd https://github.com/espeak-ng/espeak-ng ### Steps to Reproduce Run firefox under firejail. Find an article with lots of text, use the reader view button. In reader view press the headphones buttons and then the play buttons. https://support.mozilla.org/en-US/kb/firefox-reader-view-clutter-free-web-pages ### Expected behavior Firefox should use espeak-ng to play a reading of the text. ### Actual behavior Speech dispatcher will play an error message about not being able to find any modules. Something along the lines of "Its seems like your speech dispatcher is working but none of its sound modules are" ### Additional context I tried to play around with the profile config files. I was able to make the text to speech work, but it broke other stuff, so **this solution is not PR worthy**. ``` noblacklist /usr/bin/espeak-ng noblacklist /usr/share/espeak-ng-data noblacklist /usr/share/speech-dispatcher noblacklist /etc/speech-dispatcher noblacklist /usr/bin/speech-dispatcher noblacklist /usr/bin/spd-conf noblacklist /usr/bin/spd-say noblacklist /usr/bin/spdsend include /etc/firejail/firefox.profile whitelist /usr/share/espeak-ng-data whitelist /usr/share/speech-dispatcher whitelist /etc/speech-dispatcher ``` ### Checklist - [x] The issues is caused by firejail (i.e. running the program by path (e.g. `/usr/bin/vlc`) "fixes" it). - [x] I can reproduce the issue without custom modifications (e.g. globals.local). - [x] The program has a profile. (If not, request one in `https://github.com/netblue30/firejail/issues/1139`) - [x] The profile (and redirect profile if exists) hasn't already been fixed [upstream](https://github.com/netblue30/firejail/tree/master/etc). - [x] I have performed a short search for similar issues (to avoid opening a duplicate). - [x] I'm aware of `browser-allow-drm yes`/`browser-disable-u2f no` in `firejail.config` to allow DRM/U2F in browsers. - [x] I used `--profile=PROFILENAME` to set the right profile. (Only relevant for AppImages)
gitea-mirror added the
needinfo
 label 2026-05-05 09:53:30 -06:00
gitea-mirror commented 2026-05-05 09:53:32 -06:00
Author
Owner
Copy link

@kmk3 commented on GitHub (Sep 22, 2024):

Basic debugging information is missing; please follow the bug report template:

<!-- gh-comment-id:2367000890 --> @kmk3 commented on GitHub (Sep 22, 2024): Basic debugging information is missing; please follow the bug report template: * <https://github.com/netblue30/firejail/issues/new?template=bug_report.md>
gitea-mirror commented 2026-05-05 09:53:33 -06:00
Author
Owner
Copy link

@Liorst4 commented on GitHub (Sep 27, 2024):

Firejail logs

Running firejail --private --trace=/tmp/trace.log firefox https://firejail.wordpress.com/blog/ entering the reader mode and pressing the play button resulted in speech-dispatcher reading an error message aloud.

Notable system calls in the log

speech-dispatch:exec /usr/bin/speech-dispatcher:0 <- calls speech-dispatcher
speech-dispatch:stat /etc/speech-dispatcher/modules/espeak-ng-mbrola.conf:0 <- speech-dispatcher using the espeak-ng module
sh:stat /usr/bin/espeak-ng:0 <- checing that espeak-ng is present 
sd_espeak-ng-mb:stat /usr/share/espeak-ng-data/phontab:-1 <- fails to read configuration file
paplay:open64 /usr/share/sounds/speech-dispatcher/dummy-message.wav:19 <- plays error message

I think that this is the firefox code that calls speech-dispatcher

Speech dispatcher logs

After some digging I found out that speech dispatcher does write logs, but in /run directory (inside the firejail)
I was able to get the by loading the log files inside firefox itself

file:///run/user/$UID/speech-dispatcher/log/espeak-ng.log

Error processing file '/usr/share/espeak-ng-data/phontab': No such file or directory.

file:///run/user/$UID/speech-dispatcher/log/speech-dispatcher.log

speechd:   Speech Dispatcher Logging to file /run/user/$UID/speech-dispatcher/log//speech-dispatcher.log at level 3
speechd:  Configuration has been read from "/etc/speech-dispatcher/speechd.conf"
speechd:   couldn't open directory /home/$USER/.local/share/../libexec/speech-dispatcher-modules because of error No such file or directory

speechd:   couldn't open directory /usr/lib/speech-dispatcher-modules because of error No such file or directory

speechd:  Initializing output module festival with binary /usr/lib/speech-dispatcher/speech-dispatcher-modules/sd_festival and configuration /etc/speech-dispatcher/modules/festival.conf
speechd:   Output module is logging to file /run/user/$UID/speech-dispatcher/log//festival.log
speechd:  Module festival loaded.
speechd: ERROR: Module festival failed to initialize. Reason:
---------------
Communicating with Festival through a socket. Can't connect to Festival server. Check your configuration in etc/speech-dispatcher/modules/festival.conf for the specified host and port and check if Festival is really running there, e.g. with telnet. Please see documentation for more info.
---------------

speechd:  Initializing output module espeak-ng-mbrola with binary /usr/lib/speech-dispatcher/speech-dispatcher-modules/sd_espeak-ng-mbrola and configuration /etc/speech-dispatcher/modules/espeak-ng-mbrola.conf
speechd:   Output module is logging to file /run/user/$UID/speech-dispatcher/log//espeak-ng-mbrola.log
speechd:  Module espeak-ng-mbrola loaded.
speechd: ERROR: Bad syntax from output module espeak-ng-mbrola 1
speechd:  Initializing output module espeak-ng with binary /usr/lib/speech-dispatcher/speech-dispatcher-modules/sd_espeak-ng and configuration /etc/speech-dispatcher/modules/espeak-ng.conf
speechd:   Output module is logging to file /run/user/$UID/speech-dispatcher/log//espeak-ng.log
speechd:  Module espeak-ng loaded.
speechd: ERROR: Bad syntax from output module espeak-ng 1
speechd:  Initializing output module dummy with binary /usr/lib/speech-dispatcher/speech-dispatcher-modules/sd_dummy and configuration /etc/speech-dispatcher/modules/dummy.conf
speechd:   Output module is logging to file /run/user/$UID/speech-dispatcher/log//dummy.log
speechd:  Module dummy loaded.
speechd:  Module dummy started successfully with message: 
---------------
Everything ok so far.
---------------

[Fri Sep 27 18:00:26 2024 : 159611] speechd:  Error: Module reported error in request from speechd (code 3xx): 300-Opening sound device failed. Reason: Cannot open plugin server. error: file not found. 
300 MODULE ERROR
.
speechd: LINE here:|200-dummy	en	none|
speechd: LINE here:|200 OK VOICE LIST SENT|
speechd:   Speech Dispatcher Logging to file /run/user/$UID/speech-dispatcher/log//speech-dispatcher.log at level 3
speechd:   Speech Dispatcher started with 1 output module
speechd: Speech Dispatcher started and waiting for clients ...
speechd: LINE here:|200-dummy	en	none|
speechd: LINE here:|200 OK VOICE LIST SENT|
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en_US/gender-neutral.dic': No such file or directory
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/gender-neutral.dic': No such file or directory
speechd: Failed to load symbols 'gender-neutral.dic' for locale 'en_US'
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en_US/font-variants.dic': No such file or directory
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/font-variants.dic': No such file or directory
speechd: Failed to load symbols 'font-variants.dic' for locale 'en_US'
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en_US/symbols.dic': No such file or directory
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/symbols.dic': No such file or directory
speechd: Failed to load symbols 'symbols.dic' for locale 'en_US'
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en_US/emojis.dic': No such file or directory
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/emojis.dic': No such file or directory
speechd: Failed to load symbols 'emojis.dic' for locale 'en_US'
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en_US/orca.dic': No such file or directory
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/orca.dic': No such file or directory
speechd: Failed to load symbols 'orca.dic' for locale 'en_US'
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en_US/orca-chars.dic': No such file or directory
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/orca-chars.dic': No such file or directory
speechd: Failed to load symbols 'orca-chars.dic' for locale 'en_US'
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/gender-neutral.dic': No such file or directory
speechd: Failed to load symbols 'gender-neutral.dic' for locale 'en'
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/font-variants.dic': No such file or directory
speechd: Failed to load symbols 'font-variants.dic' for locale 'en'
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/symbols.dic': No such file or directory
speechd: Failed to load symbols 'symbols.dic' for locale 'en'
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/emojis.dic': No such file or directory
speechd: Failed to load symbols 'emojis.dic' for locale 'en'
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/orca.dic': No such file or directory
speechd: Failed to load symbols 'orca.dic' for locale 'en'
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/orca-chars.dic': No such file or directory
speechd: Failed to load symbols 'orca-chars.dic' for locale 'en'
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/gender-neutral.dic': No such file or directory
speechd: Failed to load symbols 'gender-neutral.dic' for locale 'en'
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/font-variants.dic': No such file or directory
speechd: Failed to load symbols 'font-variants.dic' for locale 'en'
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/symbols.dic': No such file or directory
speechd: Failed to load symbols 'symbols.dic' for locale 'en'
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/emojis.dic': No such file or directory
speechd: Failed to load symbols 'emojis.dic' for locale 'en'
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/orca.dic': No such file or directory
speechd: Failed to load symbols 'orca.dic' for locale 'en'
speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/orca-chars.dic': No such file or directory
speechd: Failed to load symbols 'orca-chars.dic' for locale 'en'
<!-- gh-comment-id:2379510414 --> @Liorst4 commented on GitHub (Sep 27, 2024): # Firejail logs Running `firejail --private --trace=/tmp/trace.log firefox https://firejail.wordpress.com/blog/` entering the reader mode and pressing the play button resulted in speech-dispatcher reading an error message aloud. ## Notable system calls in the log ``` speech-dispatch:exec /usr/bin/speech-dispatcher:0 <- calls speech-dispatcher speech-dispatch:stat /etc/speech-dispatcher/modules/espeak-ng-mbrola.conf:0 <- speech-dispatcher using the espeak-ng module sh:stat /usr/bin/espeak-ng:0 <- checing that espeak-ng is present sd_espeak-ng-mb:stat /usr/share/espeak-ng-data/phontab:-1 <- fails to read configuration file paplay:open64 /usr/share/sounds/speech-dispatcher/dummy-message.wav:19 <- plays error message ``` I _think_ that [this](https://searchfox.org/mozilla-central/source/dom/media/webspeech/synth/speechd/SpeechDispatcherService.cpp) is the firefox code that calls speech-dispatcher # Speech dispatcher logs After some digging I found out that speech dispatcher does write logs, but in /run directory (inside the firejail) I was able to get the by loading the log files inside firefox itself ## file:///run/user/$UID/speech-dispatcher/log/espeak-ng.log ``` Error processing file '/usr/share/espeak-ng-data/phontab': No such file or directory. ``` ## file:///run/user/$UID/speech-dispatcher/log/speech-dispatcher.log ``` speechd: Speech Dispatcher Logging to file /run/user/$UID/speech-dispatcher/log//speech-dispatcher.log at level 3 speechd: Configuration has been read from "/etc/speech-dispatcher/speechd.conf" speechd: couldn't open directory /home/$USER/.local/share/../libexec/speech-dispatcher-modules because of error No such file or directory speechd: couldn't open directory /usr/lib/speech-dispatcher-modules because of error No such file or directory speechd: Initializing output module festival with binary /usr/lib/speech-dispatcher/speech-dispatcher-modules/sd_festival and configuration /etc/speech-dispatcher/modules/festival.conf speechd: Output module is logging to file /run/user/$UID/speech-dispatcher/log//festival.log speechd: Module festival loaded. speechd: ERROR: Module festival failed to initialize. Reason: --------------- Communicating with Festival through a socket. Can't connect to Festival server. Check your configuration in etc/speech-dispatcher/modules/festival.conf for the specified host and port and check if Festival is really running there, e.g. with telnet. Please see documentation for more info. --------------- speechd: Initializing output module espeak-ng-mbrola with binary /usr/lib/speech-dispatcher/speech-dispatcher-modules/sd_espeak-ng-mbrola and configuration /etc/speech-dispatcher/modules/espeak-ng-mbrola.conf speechd: Output module is logging to file /run/user/$UID/speech-dispatcher/log//espeak-ng-mbrola.log speechd: Module espeak-ng-mbrola loaded. speechd: ERROR: Bad syntax from output module espeak-ng-mbrola 1 speechd: Initializing output module espeak-ng with binary /usr/lib/speech-dispatcher/speech-dispatcher-modules/sd_espeak-ng and configuration /etc/speech-dispatcher/modules/espeak-ng.conf speechd: Output module is logging to file /run/user/$UID/speech-dispatcher/log//espeak-ng.log speechd: Module espeak-ng loaded. speechd: ERROR: Bad syntax from output module espeak-ng 1 speechd: Initializing output module dummy with binary /usr/lib/speech-dispatcher/speech-dispatcher-modules/sd_dummy and configuration /etc/speech-dispatcher/modules/dummy.conf speechd: Output module is logging to file /run/user/$UID/speech-dispatcher/log//dummy.log speechd: Module dummy loaded. speechd: Module dummy started successfully with message: --------------- Everything ok so far. --------------- [Fri Sep 27 18:00:26 2024 : 159611] speechd: Error: Module reported error in request from speechd (code 3xx): 300-Opening sound device failed. Reason: Cannot open plugin server. error: file not found. 300 MODULE ERROR . speechd: LINE here:|200-dummy en none| speechd: LINE here:|200 OK VOICE LIST SENT| speechd: Speech Dispatcher Logging to file /run/user/$UID/speech-dispatcher/log//speech-dispatcher.log at level 3 speechd: Speech Dispatcher started with 1 output module speechd: Speech Dispatcher started and waiting for clients ... speechd: LINE here:|200-dummy en none| speechd: LINE here:|200 OK VOICE LIST SENT| speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en_US/gender-neutral.dic': No such file or directory speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/gender-neutral.dic': No such file or directory speechd: Failed to load symbols 'gender-neutral.dic' for locale 'en_US' speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en_US/font-variants.dic': No such file or directory speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/font-variants.dic': No such file or directory speechd: Failed to load symbols 'font-variants.dic' for locale 'en_US' speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en_US/symbols.dic': No such file or directory speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/symbols.dic': No such file or directory speechd: Failed to load symbols 'symbols.dic' for locale 'en_US' speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en_US/emojis.dic': No such file or directory speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/emojis.dic': No such file or directory speechd: Failed to load symbols 'emojis.dic' for locale 'en_US' speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en_US/orca.dic': No such file or directory speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/orca.dic': No such file or directory speechd: Failed to load symbols 'orca.dic' for locale 'en_US' speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en_US/orca-chars.dic': No such file or directory speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/orca-chars.dic': No such file or directory speechd: Failed to load symbols 'orca-chars.dic' for locale 'en_US' speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/gender-neutral.dic': No such file or directory speechd: Failed to load symbols 'gender-neutral.dic' for locale 'en' speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/font-variants.dic': No such file or directory speechd: Failed to load symbols 'font-variants.dic' for locale 'en' speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/symbols.dic': No such file or directory speechd: Failed to load symbols 'symbols.dic' for locale 'en' speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/emojis.dic': No such file or directory speechd: Failed to load symbols 'emojis.dic' for locale 'en' speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/orca.dic': No such file or directory speechd: Failed to load symbols 'orca.dic' for locale 'en' speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/orca-chars.dic': No such file or directory speechd: Failed to load symbols 'orca-chars.dic' for locale 'en' speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/gender-neutral.dic': No such file or directory speechd: Failed to load symbols 'gender-neutral.dic' for locale 'en' speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/font-variants.dic': No such file or directory speechd: Failed to load symbols 'font-variants.dic' for locale 'en' speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/symbols.dic': No such file or directory speechd: Failed to load symbols 'symbols.dic' for locale 'en' speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/emojis.dic': No such file or directory speechd: Failed to load symbols 'emojis.dic' for locale 'en' speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/orca.dic': No such file or directory speechd: Failed to load symbols 'orca.dic' for locale 'en' speechd: Failed to open file '/usr/share/speech-dispatcher/locale/en/orca-chars.dic': No such file or directory speechd: Failed to load symbols 'orca-chars.dic' for locale 'en' ```
gitea-mirror commented 2026-05-05 09:53:34 -06:00
Author
Owner
Copy link

@rusty-snake commented on GitHub (Sep 27, 2024):

sd_espeak-ng-mb:stat /usr/share/espeak-ng-data/phontab:-1 <- fails to read configuration file

So does it work if you whitelist it?

<!-- gh-comment-id:2379542406 --> @rusty-snake commented on GitHub (Sep 27, 2024): > sd_espeak-ng-mb:stat /usr/share/espeak-ng-data/phontab:-1 <- fails to read configuration file So does it work if you whitelist it?
gitea-mirror commented 2026-05-05 09:53:35 -06:00
Author
Owner
Copy link

@Liorst4 commented on GitHub (Sep 27, 2024):

sd_espeak-ng-mb:stat /usr/share/espeak-ng-data/phontab:-1 <- fails to read configuration file

So does it work if you whitelist it?

Its been a while since I wrote a profile.
I tried, but it didn't go well 😅

At first I tried to noblacklist the data driectory, but it didn't do anything.
When I explicitly whitelisted it, it worked, but other files weren't whitelisted so unrelated stuff broke.

<!-- gh-comment-id:2379932673 --> @Liorst4 commented on GitHub (Sep 27, 2024): > > sd_espeak-ng-mb:stat /usr/share/espeak-ng-data/phontab:-1 <- fails to read configuration file > > So does it work if you whitelist it? Its been a while since I wrote a profile. I tried, but it didn't go well :sweat_smile: At first I tried to `noblacklist` the data driectory, but it didn't do anything. When I explicitly `whitelist`ed it, it worked, but other files weren't whitelisted so unrelated stuff broke.
gitea-mirror commented 2026-05-05 09:53:35 -06:00
Author
Owner
Copy link

@kmk3 commented on GitHub (Sep 27, 2024):

Missing information:

  • Name/version of the Linux distribution (e.g. "Ubuntu 20.04" or "Arch Linux"):
  • Version of Firejail (firejail --version):
  • If you use a development version of firejail, also the commit from which it
    was compiled (git rev-parse HEAD):

Make sure you're using at least firejail 0.9.72.

include /etc/firejail/firefox.profile

Unless you want to override the entire /etc/firejail/firefox.profile, it's
usually better to just put all changes in ~/.config/firejail/firefox.local and
remove ~/.config/firejail/firefox.profile if it exists.

Running firejail --private --trace=/tmp/trace.log firefox https://firejail.wordpress.com/blog/ entering the reader mode and pressing
the play button resulted in speech-dispatcher reading an error message aloud.

[...]

speech-dispatch:exec /usr/bin/speech-dispatcher:0 <- calls speech-dispatcher
speech-dispatch:stat /etc/speech-dispatcher/modules/espeak-ng-mbrola.conf:0 <- speech-dispatcher using the espeak-ng module
sh:stat /usr/bin/espeak-ng:0 <- checing that espeak-ng is present 
sd_espeak-ng-mb:stat /usr/share/espeak-ng-data/phontab:-1 <- fails to read configuration file
paplay:open64 /usr/share/sounds/speech-dispatcher/dummy-message.wav:19 <- plays error message

I think that
this
is the firefox code that calls speech-dispatcher

Props for this debugging.

Does it work with just the following in firefox.local?

whitelist ${RUNUSER}/speech-dispatcher
whitelist /usr/share/espeak-ng-data
whitelist /usr/share/speech-dispatcher

whitelist /etc/speech-dispatcher

Using the above is likely part of the issue, as /etc is not whitelisted for
firefox in 0.9.72.

There were many changes to /etc handling in 0.9.73, so does it work with the
following while using firejail-git?

whitelist ${RUNUSER}/speech-dispatcher
whitelist /usr/share/espeak-ng-data
whitelist /usr/share/speech-dispatcher
private-etc speech-dispatcher
<!-- gh-comment-id:2380080196 --> @kmk3 commented on GitHub (Sep 27, 2024): Missing information: - Name/version of the Linux distribution (e.g. "Ubuntu 20.04" or "Arch Linux"): - Version of Firejail (`firejail --version`): - If you use a development version of firejail, also the commit from which it was compiled (`git rev-parse HEAD`): Make sure you're using at least firejail 0.9.72. > ``` > include /etc/firejail/firefox.profile > ``` Unless you want to override the entire /etc/firejail/firefox.profile, it's usually better to just put all changes in ~/.config/firejail/firefox.local and remove ~/.config/firejail/firefox.profile if it exists. > Running `firejail --private --trace=/tmp/trace.log firefox > https://firejail.wordpress.com/blog/` entering the reader mode and pressing > the play button resulted in speech-dispatcher reading an error message aloud. > > [...] > > ``` > speech-dispatch:exec /usr/bin/speech-dispatcher:0 <- calls speech-dispatcher > speech-dispatch:stat /etc/speech-dispatcher/modules/espeak-ng-mbrola.conf:0 <- speech-dispatcher using the espeak-ng module > sh:stat /usr/bin/espeak-ng:0 <- checing that espeak-ng is present > sd_espeak-ng-mb:stat /usr/share/espeak-ng-data/phontab:-1 <- fails to read configuration file > paplay:open64 /usr/share/sounds/speech-dispatcher/dummy-message.wav:19 <- plays error message > ``` > > I _think_ that > [this](https://searchfox.org/mozilla-central/source/dom/media/webspeech/synth/speechd/SpeechDispatcherService.cpp) > is the firefox code that calls speech-dispatcher Props for this debugging. Does it work with just the following in firefox.local? ``` whitelist ${RUNUSER}/speech-dispatcher whitelist /usr/share/espeak-ng-data whitelist /usr/share/speech-dispatcher ``` --- > ``` > whitelist /etc/speech-dispatcher > ``` Using the above is likely part of the issue, as /etc is not whitelisted for firefox in 0.9.72. There were many changes to /etc handling in 0.9.73, so does it work with the following while using firejail-git? ``` whitelist ${RUNUSER}/speech-dispatcher whitelist /usr/share/espeak-ng-data whitelist /usr/share/speech-dispatcher private-etc speech-dispatcher ```
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
master
serialize_remounts_v2
landlock_v4
landlock
release-0.9.64
release-0.9.62
gitlab_ci
LTSbase
fred_ctests
docs
0.9.80
0.9.80-rc1
0.9.78
0.9.76
0.9.76-rc4
0.9.76-rc3
0.9.76-rc2
0.9.76-rc1
0.9.74
landlock-split
0.9.72
0.9.72rc1
0.9.70
0.9.68
0.9.68rc1
0.9.66
0.9.66rc1
0.9.64.4
0.9.64.2
0.9.64
0.9.64rc1
0.9.62.4
0.9.62.2
0.9.62
0.9.56.2-LTS
0.9.60
0.9.60-rc1
0.9.58.2
0.9.58
0.9.58-rc1
0.9.56-LTS-release
0.9.56-LTS
0.9.56
0.9.56-rc1
0.9.54
0.9.54-rc2
0.9.54-rc1
0.9.52
0.9.38.12
0.9.50
0.9.50-rc1
0.9.48
0.9.46
0.9.46-rc1
0.9.44.10
0.9.44.8
0.9.44.6
0.9.38.10
0.9.44.4
0.9.38.8
0.9.44.2
0.9.44
0.9.44-rc1
0.9.38.4
0.9.42
0.9.42-rc2
0.9.38.2
0.9.42-rc1
disable-globalcfg
0.9.40
0.9.40-rc1
0.9.38
0.9.38-rc1
0.9.36
0.9.36-rc1
0.9.34
0.9.34-rc1
0.9.32
0.9.32-rc1
0.9.30
0.9.30-rc1
Labels
Clear labels   
LTS merge

   
LTS merge

   
bug

   
bug

   
converted-to-discussion

   
doc-todo

   
documentation

   
duplicate

   
enhancement

   
file-transfer

   
firecfg

   
firejail-in-firejail

   
firetools

   
graphics

   
help wanted

   
information_old

   
installation

   
invalid

   
modif

   
moved

   
needinfo

   
networking

   
notabug

   
notourbug

   
old-version

   
overlayfs

   
packaging

   
profile-request

   
pull-request

Mirrored from GitHub Pull Request

  
question

   
question_old

   
removal

   
runtime-permissions

   
sandbox-ipc

   
security

   
stale

   
wiki

   
wiki

   
wontfix

   
wordpress

   
workaround
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3288
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?