[GH-ISSUE #67] --private fails on linux-ck kernel (Arch Linux) #39

Closed
opened 2026-05-05 04:50:07 -06:00 by gitea-mirror · 2 comments
Owner

Originally created by @netblue30 on GitHub (Sep 24, 2015).
Original GitHub issue: https://github.com/netblue30/firejail/issues/67

Imported form reddit: https://www.reddit.com/r/linux/comments/3lt0p1/firejail_a_security_sandbox_for_mozilla_firefox/cvb3qo1

Originally created by @netblue30 on GitHub (Sep 24, 2015). Original GitHub issue: https://github.com/netblue30/firejail/issues/67 Imported form reddit: https://www.reddit.com/r/linux/comments/3lt0p1/firejail_a_security_sandbox_for_mozilla_firefox/cvb3qo1
gitea-mirror 2026-05-05 04:50:07 -06:00
  • closed this issue
  • added the
    bug
    label
Author
Owner

@dosy4ev commented on GitHub (Sep 24, 2015):

I use stock archlinux kernel (4.1.6-1-ARCH at this moment) and I have this bug too.
So this isn't ck kernel specific.

--private works fine for some other app i've tried (pcmanfm, mc).

Output of firejail --noprofile --private firefox:

Parent pid 30062, child pid 30063
Child process initialized

(process:1): GLib-CRITICAL **: g_slice_set_config: assertion 'sys_page_size == 0' failed

parent is shutting down, bye...

After that firefox just starts as usual.

Firefox version is Mozilla Firefox 40.0.3. Firejail version is firejail version 0.9.30.

<!-- gh-comment-id:143045504 --> @dosy4ev commented on GitHub (Sep 24, 2015): I use stock archlinux kernel (`4.1.6-1-ARCH` at this moment) and I have this bug too. So this isn't ck kernel specific. `--private` works fine for some other app i've tried (pcmanfm, mc). Output of `firejail --noprofile --private firefox`: ``` Parent pid 30062, child pid 30063 Child process initialized (process:1): GLib-CRITICAL **: g_slice_set_config: assertion 'sys_page_size == 0' failed parent is shutting down, bye... ``` After that firefox just starts as usual. Firefox version is `Mozilla Firefox 40.0.3`. Firejail version is `firejail version 0.9.30`.
Author
Owner

@netblue30 commented on GitHub (Sep 26, 2015):

I think I know what's going on! It is Firefox imposing a single process instance in the system.

By default, the browser uses a single process to handle multiple windows. When you start the browser, if another Firefox process is already running, the existing process opens a new tab or a new window.

Make sure Firefox is not already running when you start it in Firejail sandbox, otherwise you end up with a new window running outside the sandbox. Chromium has the same problem, and quite a number of other programs, most notably file managers.

I'll close the bug for now, we can always reopen it if necessary.

<!-- gh-comment-id:143452863 --> @netblue30 commented on GitHub (Sep 26, 2015): I think I know what's going on! It is Firefox imposing a single process instance in the system. By default, the browser uses a single process to handle multiple windows. When you start the browser, if another Firefox process is already running, the existing process opens a new tab or a new window. Make sure Firefox is not already running when you start it in Firejail sandbox, otherwise you end up with a new window running outside the sandbox. Chromium has the same problem, and quite a number of other programs, most notably file managers. I'll close the bug for now, we can always reopen it if necessary.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#39
No description provided.