github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #7072] jailcheck: no results for sandboxed applications #3475

New issue

Open

opened 2026-05-05 10:01:21 -06:00 by gitea-mirror · 3 comments

gitea-mirror commented

2026-05-05 10:01:21 -06:00

Owner

Originally created by @ginto37 on GitHub (Feb 20, 2026).
Original GitHub issue: https://github.com/netblue30/firejail/issues/7072

Description

Describe the bug

Jailcheck returns no output for applications currently running in a firejail sandbox.

Steps to Reproduce

Steps to reproduce the behavior

Launch an application that is sandboxed with firejail
Confirm the application is actually sandboxed:

$ firemon --list
239027:standarduser::/usr/bin/firejail /usr/bin/gedit
244077:standarduser::/usr/bin/firejail /usr/bin/firefox-esr

Run jailcheck

$ sudo jailcheck

Expected behavior

What you expected to happen

jailcheck should test the sandboxes of the applications listed by firemon --list and produce the results.

Actual behavior

What actually happened

jailcheck returns nothing for the sandboxed applications

$ sudo jailcheck --debug
Warning: directory /run/user/1000 not found, skipping
cleaning up!

Behavior without a profile

What changed calling LC_ALL=C firejail --noprofile /path/to/program in a
terminal?

N/A

Additional context

Any other detail that may help to understand/debug the problem

I'm running a multi-user system. The version of firejail is not the latest available but the latest offered by the PPA.

Environment

Name/version/arch of the Linux kernel (uname -srm):
Linux 6.8.0-94-generic x86_64
Name/version of the Linux distribution (e.g. "Ubuntu 20.04" or "Arch Linux"):
Ubuntu 22.04 LTS
Name/version of the relevant program(s)/package(s) (e.g. "firefox 134.0-1,
mesa 1:24.3.3-2"):
gedit: 41.0
Version of Firejail (firejail --version):
0.9.74
If you use a development version of firejail, also the commit from which it
was compiled (git rev-parse HEAD):
N/A

Checklist

I am using firejail 0.9.78 or later
PPA is only 0.9.74
I am using the full program path (e.g. firejail /usr/bin/vlc instead of firejail vlc; see https://github.com/netblue30/firejail/issues/2877)
The issues is caused by firejail (i.e. running the program by path (e.g. /usr/bin/vlc) "fixes" it).
I can reproduce the issue without custom modifications (e.g. globals.local).
The program has a profile. (If not, request one in https://github.com/netblue30/firejail/issues/1139)
The profile (and redirect profile if exists) hasn't already been fixed upstream.
I have performed a short search for similar issues (to avoid opening a duplicate).
I'm aware of browser-allow-drm yes/browser-disable-u2f no in firejail.config to allow DRM/U2F in browsers.
I used --profile=PROFILENAME to set the right profile. (Only relevant for AppImages)

Log

Output of LC_ALL=C firejail /path/to/program

output goes here

Output of LC_ALL=C firejail --debug /path/to/program

output goes here

Originally created by @ginto37 on GitHub (Feb 20, 2026). Original GitHub issue: https://github.com/netblue30/firejail/issues/7072  ### Description _Describe the bug_ Jailcheck returns no output for applications currently running in a firejail sandbox. ### Steps to Reproduce _Steps to reproduce the behavior_ 1. Launch an application that is sandboxed with `firejail` 2. Confirm the application is actually sandboxed: ``` $ firemon --list 239027:standarduser::/usr/bin/firejail /usr/bin/gedit 244077:standarduser::/usr/bin/firejail /usr/bin/firefox-esr ``` 3. Run `jailcheck` ``` $ sudo jailcheck ``` ### Expected behavior _What you expected to happen_ `jailcheck` should test the sandboxes of the applications listed by `firemon --list` and produce the results. ### Actual behavior _What actually happened_ `jailcheck` returns nothing for the sandboxed applications ``` $ sudo jailcheck --debug Warning: directory /run/user/1000 not found, skipping cleaning up! ``` ### Behavior without a profile _What changed calling `LC_ALL=C firejail --noprofile /path/to/program` in a terminal?_ N/A ### Additional context _Any other detail that may help to understand/debug the problem_ I'm running a multi-user system. The version of `firejail` is not the latest available but the latest offered by the PPA. ### Environment - Name/version/arch of the Linux kernel (`uname -srm`): _Linux 6.8.0-94-generic x86_64_ - Name/version of the Linux distribution (e.g. "Ubuntu 20.04" or "Arch Linux"): _Ubuntu 22.04 LTS_ - Name/version of the relevant program(s)/package(s) (e.g. "firefox 134.0-1, mesa 1:24.3.3-2"): _gedit: 41.0_ - Version of Firejail (`firejail --version`): _0.9.74_ - If you use a development version of firejail, also the commit from which it was compiled (`git rev-parse HEAD`): N/A ### Checklist  - [ ] I am using firejail [0.9.78 or later](https://github.com/netblue30/firejail/tree/master/SECURITY.md) _PPA is only 0.9.74_ - [x] I am using the full program path (e.g. `firejail /usr/bin/vlc` instead of `firejail vlc`; see `https://github.com/netblue30/firejail/issues/2877`) - [x] The issues is caused by firejail (i.e. running the program by path (e.g. `/usr/bin/vlc`) "fixes" it). - [x] I can reproduce the issue without custom modifications (e.g. globals.local). - [x] The program has a profile. (If not, request one in `https://github.com/netblue30/firejail/issues/1139`) - [x] The profile (and redirect profile if exists) hasn't already been fixed [upstream](https://github.com/netblue30/firejail/tree/master/etc). - [x] I have performed a short search for similar issues (to avoid opening a duplicate). - [x] I'm aware of `browser-allow-drm yes`/`browser-disable-u2f no` in `firejail.config` to allow DRM/U2F in browsers. - [ ] I used `--profile=PROFILENAME` to set the right profile. (Only relevant for AppImages) ### Log <details> <summary>Output of <code>LC_ALL=C firejail /path/to/program</code></summary> <p> ``` output goes here ``` </p> </details> <details> <summary>Output of <code>LC_ALL=C firejail --debug /path/to/program</code></summary> <p>  ``` output goes here ``` </p> </details>

gitea-mirror added the

needinfo

old-version

labels 2026-05-05 10:01:21 -06:00

gitea-mirror commented

2026-05-05 10:01:23 -06:00

Author

Owner

@netblue30 commented on GitHub (Mar 17, 2026):

Please update to the latest version: 0.9.80. You can use the deb package from the release. I'll also do some tests here, thanks for the report.

@netblue30 commented on GitHub (Mar 17, 2026): Please update to the latest version: 0.9.80. You can use the deb package from the release. I'll also do some tests here, thanks for the report.

gitea-mirror commented

2026-05-05 10:01:24 -06:00

Author

Owner

@ginto37 commented on GitHub (Apr 18, 2026):

I couldn't install the latest version. It fails with an error every time. I confirmed the checksum so the download is good.

$ sudo dpkg -i firejail_0.9.80_1_amd64.deb
    	
FAIL: (Reading database ... 238526 files and directories currently installed.)
Preparing to unpack ./firejail_0.9.80_1_amd64.deb ...
Unpacking firejail (0.9.80-1) over (0.9.74-1~0ubuntu22.04.0) ...
dpkg: error processing archive ./firejail_0.9.80_1_amd64.deb (--install):
 trying to overwrite '/etc/firejail/0ad.profile', which is also in package firejail-
 	profiles 0.9.74-1~0ubuntu22.04.0
dpkg-deb: error: paste subprocess was killed by signal (Broken pipe)
Errors were encountered while processing:
 ./firejail_0.9.80_1_amd64.deb

@ginto37 commented on GitHub (Apr 18, 2026): I couldn't install the latest version. It fails with an error every time. I confirmed the checksum so the download is good. ``` $ sudo dpkg -i firejail_0.9.80_1_amd64.deb FAIL: (Reading database ... 238526 files and directories currently installed.) Preparing to unpack ./firejail_0.9.80_1_amd64.deb ... Unpacking firejail (0.9.80-1) over (0.9.74-1~0ubuntu22.04.0) ... dpkg: error processing archive ./firejail_0.9.80_1_amd64.deb (--install): trying to overwrite '/etc/firejail/0ad.profile', which is also in package firejail- profiles 0.9.74-1~0ubuntu22.04.0 dpkg-deb: error: paste subprocess was killed by signal (Broken pipe) Errors were encountered while processing: ./firejail_0.9.80_1_amd64.deb ```

gitea-mirror commented

2026-05-05 10:01:25 -06:00

Author

Owner

@kmk3 commented on GitHub (Apr 18, 2026):

I couldn't install the latest version. It fails with an error every time. I
confirmed the checksum so the download is good.

$ sudo dpkg -i firejail_0.9.80_1_amd64.deb
    	
FAIL: (Reading database ... 238526 files and directories currently installed.)
Preparing to unpack ./firejail_0.9.80_1_amd64.deb ...
Unpacking firejail (0.9.80-1) over (0.9.74-1~0ubuntu22.04.0) ...
dpkg: error processing archive ./firejail_0.9.80_1_amd64.deb (--install):
 trying to overwrite '/etc/firejail/0ad.profile', which is also in package firejail-
 	profiles 0.9.74-1~0ubuntu22.04.0
dpkg-deb: error: paste subprocess was killed by signal (Broken pipe)
Errors were encountered while processing:
 ./firejail_0.9.80_1_amd64.deb

Does it work if you uninstall "firejail" and "firejail-profiles" before trying
to install the .deb package?

@kmk3 commented on GitHub (Apr 18, 2026): > I couldn't install the latest version. It fails with an error every time. I > confirmed the checksum so the download is good. > > ``` > $ sudo dpkg -i firejail_0.9.80_1_amd64.deb > > FAIL: (Reading database ... 238526 files and directories currently installed.) > Preparing to unpack ./firejail_0.9.80_1_amd64.deb ... > Unpacking firejail (0.9.80-1) over (0.9.74-1~0ubuntu22.04.0) ... > dpkg: error processing archive ./firejail_0.9.80_1_amd64.deb (--install): > trying to overwrite '/etc/firejail/0ad.profile', which is also in package firejail- > profiles 0.9.74-1~0ubuntu22.04.0 > dpkg-deb: error: paste subprocess was killed by signal (Broken pipe) > Errors were encountered while processing: > ./firejail_0.9.80_1_amd64.deb > ``` Does it work if you uninstall "firejail" and "firejail-profiles" before trying to install the .deb package?

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3475

No description provided.

Rows
Columns