github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #780] Error: cannot switch euid to root #528

New issue

Closed

opened 2026-05-05 06:03:15 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 06:03:15 -06:00

Owner

Originally created by @graywolf on GitHub (Sep 15, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/780

I'm having troubles getting firejail to work with vlc.

$ firejail vlc
Reading profile /etc/firejail/vlc.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Warning: user namespaces not available in the current kernel.
Parent pid 6258, child pid 6259
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted

Child process initialized
Error: cannot switch euid to root
Warning: an existing sandbox was detected. vlc  will run without any additional sandboxing features in a /bin/sh shell

Two last lines repeat until I stop it (CTRL+C). However, I do not belive that this is a duplicate of other two issues with similar error, because my firejail is SUID and in general it works:

$ firejail --version
firejail version 0.9.40

Also other program (like chromium and palemoon) DO work just fine, so this is something vlc (and probably few others?) specific.

Could you please help me with this problem? :)

PS: I've got the same error when I tried to launch mupdf (true, I tried to use evince profile since mupdf doesn't have one and hey, both view pdf).

Originally created by @graywolf on GitHub (Sep 15, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/780 I'm having troubles getting firejail to work with vlc. ``` $ firejail vlc Reading profile /etc/firejail/vlc.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-passwdmgr.inc Warning: user namespaces not available in the current kernel. Parent pid 6258, child pid 6259 Warning: /sbin directory link was not blacklisted Warning: /usr/sbin directory link was not blacklisted Child process initialized Error: cannot switch euid to root Warning: an existing sandbox was detected. vlc will run without any additional sandboxing features in a /bin/sh shell ``` Two last lines repeat until I stop it (CTRL+C). However, I do not belive that this is a duplicate of other two issues with similar error, because my firejail is SUID and in general it works: ``` $ firejail --version firejail version 0.9.40 ``` Also other program (like chromium and palemoon) DO work just fine, so this is something vlc (and probably few others?) specific. Could you please help me with this problem? :) PS: I've got the same error when I tried to launch `mupdf` (true, I tried to use evince profile since mupdf doesn't have one and hey, both view pdf).

gitea-mirror

2026-05-05 06:03:15 -06:00

closed this issue
added the
information_old
label

gitea-mirror commented

2026-05-05 06:03:21 -06:00

Author

Owner

@netblue30 commented on GitHub (Sep 15, 2016):

Warning: an existing sandbox was detected.

When you start vlc, are you already in a sandbox? Do you have vlc defined as a symbolic link or as a script in /usr/local/bin?

@netblue30 commented on GitHub (Sep 15, 2016): > Warning: an existing sandbox was detected. When you start vlc, are you already in a sandbox? Do you have vlc defined as a symbolic link or as a script in /usr/local/bin?

gitea-mirror commented

2026-05-05 06:03:23 -06:00

Author

Owner

@graywolf commented on GitHub (Sep 15, 2016):

Do you have vlc defined as a symbolic link or as a script in /usr/local/bin?

not exactly but on the right track, firejail was trying to recursively launch script starting firejail, thanks :)

@graywolf commented on GitHub (Sep 15, 2016): > Do you have vlc defined as a symbolic link or as a script in /usr/local/bin? not exactly but on the right track, firejail was trying to recursively launch script starting firejail, thanks :)

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#528

No description provided.

Rows
Columns