mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #1282] support xonsh as the login shell #873
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#873
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @cryzed on GitHub (May 18, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1282
Since the recent update to firejail-0.9.4.6(-1) on Arch Linux it seems to be broken, at least on my system. When I try to start any application using firejail, even using
--noprofileto make sure it's not a configuration issue, firejail seemingly exits immediately while simply writing the used path to stderr. Here's a sample output formpv:Here is the output using
$ firejail --debug --noprofile /usr/bin/mpv. I'm using the standard Arch Linux kernel on a 64 bit installation; the previous version: firejail-0.9.44.10(-1) worked flawlessly. Let me know if I can provide more information; I suspect this is an issue with the build, since no one else seems to be having issues.@ghost commented on GitHub (May 18, 2017):
I also have difficulties using Firejail 0.9.46-1 on Arch. What I have experienced:
Firefox crashes when started in firejail. If I choose restart Firefox, then it is firejailed and starts... If Firefox is running when I launch
firejail firefox, it works flawlessly. Log of restartedfirejail --debug firefoxand closed firefox can be found here and log offirejail --debug firefox(and after that I chose quit) can be found hereThunderbird won't launch in firejail. Here is the log.
Spotify doesn't work either: here is the log.
I use Arch with the default kernel:
4.10.13-1-ARCHDropbox works in firejail.
Oh, one more thing: I've updated the firejail profiles in
~/.config/firejailfrom/etc/firejail/before posting these.Let me know if I can provide some additional info (I use zsh).
EDIT: I've noticed another thing. When I run
firejail firefoxand choose restart,firejail --listshowsBut
EDIT 2: as someone told me, this is not strange, because of this:
@pigmonkey commented on GitHub (May 18, 2017):
I have experienced no issues on Arch. I did notice that the new config file was installed as
/etc/firejail/firejail.config.pacnew. Have you merged that?@cryzed commented on GitHub (May 19, 2017):
@pigmonkey yes, I did:
I went so far as to remove it completely before installing the update, it's definitely the umodified configuration file. Here is my output for the commands you ran:
Some "special" things I do, which maybe in some strange way I can't fathom might cause issues are:
--debugoutput still displays:Autoselecting /usr/bin/xonsh as shell)... that's about it, really.
@ghost commented on GitHub (May 19, 2017):
How does one merge
/etc/firejail/firejail.config.pacnew? Just replace firejail.config?My output:
@cryzed commented on GitHub (May 19, 2017):
@Lemongrass38 if you are sure that you haven't modified the file in question you can usually just:
# mv /etc/firejail/firejail.config.pacnew /etc/firejail/firejail.config. But this is more of a general pacman question.@netblue30 commented on GitHub (May 19, 2017):
@cryzed - it could be because of /usr/bin/xnosh shell you have set up. Try this:
@netblue30 commented on GitHub (May 19, 2017):
@Lemongrass38 - All of them are crashing with this message:
What happens if you run "firejail --private --noprofile firefox -no-remote"?
@ghost commented on GitHub (May 19, 2017):
@cryzed : thanks for your reply. I merged the config file. :)
@netblue30 : thank you too for your time. I've tried the command you showed and Firefox started without any problem, however the Firefox didn't load my profile so it was like using Firefox with a new profile.
firejail --private firefox -no-remoteseems to do the same, butfirejail --noprofile firefox -no-remoteloads my Firefox profile. This works for Thunderbird and Spotify too.@cryzed commented on GitHub (May 19, 2017):
@netblue30 that works as expected. It seems to be xonsh then, or some incompatibility with it. Can I provide you with some information so you can fix this or is this an issue with xonsh itself? For now I simply added
shell noneto my firejail configuration that is pulled in by all the other profiles.@netblue30 commented on GitHub (May 24, 2017):
@cryzed - I'll try to bring in full support for xonsh in the next version. Until then, try to survive with sell none.
@netblue30 commented on GitHub (May 24, 2017):
@Lemongrass38 - there seem to be some problems on some systems - probably Gnome or similar - with "ipc-namespace" line in profiles. I am not seeing them on my computer, but other people are also complaining. They all get the "received an X Window System error". We commented out that line in firefox.profile. Look in /etc/firejail directory for the programs you have problems with and comment out that line - if it fixes it please let me know.
@ghost commented on GitHub (May 24, 2017):
@netblue30 : I commented out the
ipc-namespaceline in/etc/firejail/firefox.profileand in~/.config/firejail/firefox.profileas well. Firefox and Thunderbird now work as before. :) Thank you!Spotify still needs the
firejail --noprofile spotify %Ulaunch. Its profile doesn't seem to haveipc-namespacein it.@Fred-Barclay commented on GitHub (May 25, 2017):
Hi @Lemongrass38
I'm not entirely sure what's going on with the Spotify profile. It launches fine on my system, but others are reporting problems: #1306
@ghost commented on GitHub (May 25, 2017):
Hi @Fred-Barclay , I guess it's just something with openssl. Recently a new version of openssl broke Spotify in AUR, and Spotify's maintainer changed its dependencies to some 'compatible' versions of openssl. As I know, an even newer version of openssl is compatible with Spotify. Once that happens, I post here whether this error still persists.
@ghost commented on GitHub (May 26, 2017):
This happened just now.
firejail spotifyis still not working without--noprofile. Log. As I see the problem is now caused by libcurl.so.3.@netblue30 commented on GitHub (May 26, 2017):
@Lemongrass38 - I have commented out ipc-namespaces in most profiles until we figure out what's going on. Try to install the mainline git version of firejail. There are all kind of other bugs fixed there.
spotify: in a text editor, as root, open /etc/firejail/sporify.profile and comment out some lines there (add a #). One of them is creating the problem, you just need to find it. Or start with all lines commented out (equivalent with --noprofile) and bring them back one by one.
@ghost commented on GitHub (May 27, 2017):
@netblue30 : Thank you for your debugging tips. I've managed to find the issue. I've commented out these lines like:
These are both needed for Spotify to run. The first line causes the Gtk-WARNING, the second is just needed too.
I've forgot that my .cache/spotify is actually a symlink to a folder on /mnt/adatok (the data partition).
I've been thinking about adding my data partition to my firejail profiles with just the same settings as my home folder. As far as I see, firejail blocks the home folder only.
@Fred-Barclay commented on GitHub (May 27, 2017):
@Lemongrass38 Is
#blacklist ${HOME}/.Xauthorityactually needed for Spotify to run, or does it just cause the Gtk-WARNING?@ghost commented on GitHub (May 27, 2017):
Well, the Gtk-WARNING causes my command to terminate... Both lines are imperative to be commented out, otherwise Spotify won't launch.
The terminal outputs of firejail spotify can be found here when
blacklist ${HOME}/.Xauthorityis not commented out and here when it is commented out (I closed Spotify manually).pacman -Qs gtkoutput here.Btw. if there's a way to cut my half of this "topic" or "issue" to another one, somebody can do that. I posted here because I thought that my problem is related to cryzed's, but it's not really.
@Fred-Barclay commented on GitHub (May 27, 2017):
@Lemongrass38 I've edited the spotify profile, thanks!
We can continue this discussion in #1306 if you prefer. 😄
@chiraag-nataraj commented on GitHub (Aug 19, 2018):
Is this fixed?
@chiraag-nataraj commented on GitHub (May 21, 2019):
Closing for inactivity. Please feel free to re-open if this is still an issue.