github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #1196] application window greys out #818

New issue

Closed

opened 2026-05-05 06:54:11 -06:00 by gitea-mirror · 4 comments

gitea-mirror commented

2026-05-05 06:54:11 -06:00

Owner

Originally created by @gso on GitHub (Apr 5, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1196

Ubuntu 16.04.2
firejail version 0.9.44.10
Intel® Core™ Duo CPU T2250 @ 1.73GHz × 2
2.0 GiB
Intel® 945GM x86/MMX/SSE2

/usr/bin/firejail --xll=xorg --private=~/Opera-Sandbox /usr/bin/opera --private

With --x11=xorg the application window greys out after a few seconds of the window rendering, an 'Application not responding' - 'Wait' / 'Force Quit' dialogue displaying on exit.

The same issue also when running firefox in the sandbox.

With xpra the browser window renders OK, however with the following issues, i) the mouse pointer disappears for some reason [edit: this is not a problem with the latest release of xpra], ii) firejail sometimes hangs at the command line (before the browser window actually renders), though will run OK the second time the command is invoked, and iii) if I switch to a text console and back to X the browser crashes a few seconds later.

This is a low spec. machine, the same command to run a sandboxed browser works without any problems on Lubuntu, Linux Mint Cinnamon and Zorin OS (GNOME 3 desktop by the looks, Ubuntu based dist.).

Originally created by @gso on GitHub (Apr 5, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1196 Ubuntu 16.04.2 `firejail` version 0.9.44.10 Intel® Core™ Duo CPU T2250 @ 1.73GHz × 2 2.0 GiB Intel® 945GM x86/MMX/SSE2 `/usr/bin/firejail --xll=xorg --private=~/Opera-Sandbox /usr/bin/opera --private` With `--x11=xorg` the application window greys out after a few seconds of the window rendering, an 'Application not responding' - 'Wait' / 'Force Quit' dialogue displaying on exit. The same issue also when running `firefox` in the sandbox. With `xpra` the browser window renders OK, however with the following issues, i) the mouse pointer disappears for some reason [edit: this is not a problem with the latest release of `xpra`], ii) `firejail` sometimes hangs at the command line (before the browser window actually renders), though will run OK the second time the command is invoked, and iii) if I switch to a text console and back to X the browser crashes a few seconds later. This is a low spec. machine, the same command to run a sandboxed browser works without any problems on Lubuntu, Linux Mint Cinnamon and Zorin OS (GNOME 3 desktop by the looks, Ubuntu based dist.).

gitea-mirror

2026-05-05 06:54:11 -06:00

closed this issue
added the
information_old
label

gitea-mirror commented

2026-05-05 06:54:17 -06:00

Author

Owner

@netblue30 commented on GitHub (Apr 9, 2017):

X11 security extension disables a number of regular X11 extensions. If your application uses one of them, the application will freeze. For example I start Chromium:

$ firejail --x11=xorg chromium
Reading profile /etc/firejail/chromium.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Parent pid 1817, child pid 1819
Using authority file /tmp/.tmpXauth-TaWIdm
authorization id is 749
Writing authority file /tmp/.tmpXauth-TaWIdm
Child process initialized
Warning: an existing sandbox was detected. /usr/bin/chromium will run without any additional sandboxing features
Xlib:  extension "RANDR" missing on display ":0.0".
Xlib:  extension "XInputExtension" missing on display ":0.0".
Xlib:  extension "RANDR" missing on display ":0.0".
Xlib:  extension "XInputExtension" missing on display ":0.0".
Xlib:  extension "XInputExtension" missing on display ":0.0".
Xlib:  extension "SHAPE" missing on display ":0.0".
Xlib:  extension "SHAPE" missing on display ":0.0".

The browser comes up, but the mouse doesn't work. On Debian jessie I get about half the programs working (including Firefox), the rest behave strangely.

@netblue30 commented on GitHub (Apr 9, 2017): X11 security extension disables a number of regular X11 extensions. If your application uses one of them, the application will freeze. For example I start Chromium: ````` $ firejail --x11=xorg chromium Reading profile /etc/firejail/chromium.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-common.inc Parent pid 1817, child pid 1819 Using authority file /tmp/.tmpXauth-TaWIdm authorization id is 749 Writing authority file /tmp/.tmpXauth-TaWIdm Child process initialized Warning: an existing sandbox was detected. /usr/bin/chromium will run without any additional sandboxing features Xlib: extension "RANDR" missing on display ":0.0". Xlib: extension "XInputExtension" missing on display ":0.0". Xlib: extension "RANDR" missing on display ":0.0". Xlib: extension "XInputExtension" missing on display ":0.0". Xlib: extension "XInputExtension" missing on display ":0.0". Xlib: extension "SHAPE" missing on display ":0.0". Xlib: extension "SHAPE" missing on display ":0.0". ````` The browser comes up, but the mouse doesn't work. On Debian jessie I get about half the programs working (including Firefox), the rest behave strangely.

gitea-mirror commented

2026-05-05 06:54:18 -06:00

Author

Owner

@gso commented on GitHub (Apr 12, 2017):

The odd thing was that while a program works with the xorg server on lubuntu, Mint, Zorin, the same program greys out on Unity. Could be a resources issue (a low spec. laptop), works fine on Zorin though (GNOME 3).

That a browser (tested with opera and firefox) crashes on switching back from a text console to X, you would think was possibly a resource issue also, the error message is:

2017-04-12 14:10:29,903 Disconnecting client '/home/.../.xpra/Presario-C500-RY514EA-ABU-838': client ping timeout (waited 60 seconds without a response)
2017-04-12 14:10:29,911 xpra client disconnected.

From the xpra manual:

−−idle−timeout=IDLETIMEOUT
The connection will be terminated if there is no user activity (mouse clicks or key presses) for the given amount of time (in seconds). Use the value 0 to disable this timeout.

Adding idle−timeout=0 to ~/.xpra/xpra.conf has no effect on this unfortunately. It's odd again though that it should happen only with Unity.

@gso commented on GitHub (Apr 12, 2017): The odd thing was that while a program works with the `xorg` server on lubuntu, Mint, Zorin, the same program greys out on Unity. Could be a resources issue (a low spec. laptop), works fine on Zorin though (GNOME 3). That a browser (tested with `opera` and `firefox`) crashes on switching back from a text console to X, you would think was possibly a resource issue also, the error message is: ``` 2017-04-12 14:10:29,903 Disconnecting client '/home/.../.xpra/Presario-C500-RY514EA-ABU-838': client ping timeout (waited 60 seconds without a response) 2017-04-12 14:10:29,911 xpra client disconnected. ``` From the [`xpra` manual](http://xpra.org/manual.html): > −−idle−timeout=IDLETIMEOUT > The connection will be terminated if there is no user activity (mouse clicks or key presses) for the given amount of time (in seconds). Use the value 0 to disable this timeout. Adding `idle−timeout=0` to `~/.xpra/xpra.conf` has no effect on this unfortunately. It's odd again though that it should happen only with Unity.

gitea-mirror commented

2026-05-05 06:54:20 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (Jul 22, 2018):

Is this still an issue?

@chiraag-nataraj commented on GitHub (Jul 22, 2018): Is this still an issue?

gitea-mirror commented

2026-05-05 06:54:22 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (Jul 30, 2018):

I'm going to close this for now. @gso, please feel free to re-open if this is still an issue.

@chiraag-nataraj commented on GitHub (Jul 30, 2018): I'm going to close this for now. @gso, please feel free to re-open if this is still an issue.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#818

No description provided.

Rows
Columns