[GH-ISSUE #556] 0.9.38-1~bpo: firejail cannot handle /etc/skel/.bashrc as symlink #392

Closed
opened 2026-05-05 05:46:18 -06:00 by gitea-mirror · 2 comments
Owner

Originally created by @Symbolis on GitHub (Jun 5, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/556

Was told to report this issue from distro downstream from Debian Jessie (jessie-backports).

Firejail whitelisting fails because /etc/skel/.bashrc is a symlink in their distro:

user@host:~$ firejail /usr/bin/iceweasel
Reading profile /home/user/.config/firejail/iceweasel.profile
Reading profile /etc/firejail/disable-mgmt.inc
Reading profile /etc/firejail/disable-secret.inc
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/whitelist-common.inc
Parent pid 30345, child pid 30346
Error: invalid /etc/skel/.bashrc file
Error: cannot establish communication with the parent, exiting...

Issue goes away when /etc/skel/.bashrc is not a symlink (rm -f /etc/skel/.bashrc and copy original instead)

I can't check if fixed in 9.40 or not, sorry, but not finding tickets.

How to reproduce:

cp /etc/skel/.bashrc /etc/skel/.bashrc.orig
rm /etc/skel/.bashrc
ln -s /etc/skel/.bashrc.orig /etc/skel/.bashrc
firejail /usr/bin/iceweasel

Originally created by @Symbolis on GitHub (Jun 5, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/556 Was told to report this issue from distro downstream from Debian Jessie (jessie-backports). Firejail whitelisting fails because /etc/skel/.bashrc is a symlink in their distro: user@host:~$ firejail /usr/bin/iceweasel Reading profile /home/user/.config/firejail/iceweasel.profile Reading profile /etc/firejail/disable-mgmt.inc Reading profile /etc/firejail/disable-secret.inc Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/whitelist-common.inc Parent pid 30345, child pid 30346 Error: invalid /etc/skel/.bashrc file Error: cannot establish communication with the parent, exiting... Issue goes away when /etc/skel/.bashrc is not a symlink (rm -f /etc/skel/.bashrc and copy original instead) I can't check if fixed in 9.40 or not, sorry, but not finding tickets. How to reproduce: cp /etc/skel/.bashrc /etc/skel/.bashrc.orig rm /etc/skel/.bashrc ln -s /etc/skel/.bashrc.orig /etc/skel/.bashrc firejail /usr/bin/iceweasel
gitea-mirror 2026-05-05 05:46:18 -06:00
  • closed this issue
  • added the
    bug
    label
Author
Owner

@Symbolis commented on GitHub (Jun 5, 2016):

Also happens on 9.40 (attempted on another distro).

<!-- gh-comment-id:223842174 --> @Symbolis commented on GitHub (Jun 5, 2016): Also happens on 9.40 (attempted on another distro).
Author
Owner

@netblue30 commented on GitHub (Jun 6, 2016):

I have a fix in git. The commit is c5ed2af102

Thank you for the bug report.

<!-- gh-comment-id:223971827 --> @netblue30 commented on GitHub (Jun 6, 2016): I have a fix in git. The commit is https://github.com/netblue30/firejail/commit/c5ed2af102d72be6aa4edc473f50278013b10241 Thank you for the bug report.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#392
No description provided.