[GH-ISSUE #1348] Disallowing fchmod is incompatible with --nogroups in 0.9.46 and later #927

New issue

Closed

opened 2026-05-05 07:10:00 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 07:10:00 -06:00

Owner

Originally created by @kevinoid on GitHub (Jun 25, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1348

Disallowing fchmod via seccomp with nogroups in Firejail 0.9.46 and later results in the following error:

$ firejail --noprofile --nogroups --seccomp=fchmod:EOPNOTSUPP echo hi
Parent pid 18320, child pid 18322
Error chmod: sandbox.c:114 save_nogroups: Operation not supported
Error: proc 18320 cannot sync with peer: unexpected EOF
Peer 18322 unexpectedly exited with status 1

I bisected the regression to commit 322ce2c.

Thanks,
Kevin

Originally created by @kevinoid on GitHub (Jun 25, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1348 Disallowing `fchmod` via `seccomp` with `nogroups` in Firejail 0.9.46 and later results in the following error: $ firejail --noprofile --nogroups --seccomp=fchmod:EOPNOTSUPP echo hi Parent pid 18320, child pid 18322 Error chmod: sandbox.c:114 save_nogroups: Operation not supported Error: proc 18320 cannot sync with peer: unexpected EOF Peer 18322 unexpectedly exited with status 1 I bisected the regression to commit 322ce2c. Thanks, Kevin

gitea-mirror

2026-05-05 07:10:00 -06:00

closed this issue
added the
bug
label

gitea-mirror commented

2026-05-05 07:10:09 -06:00

Author

Owner

@netblue30 commented on GitHub (Jun 27, 2017):

Thanks for the bug!

@netblue30 commented on GitHub (Jun 27, 2017): Thanks for the bug!

gitea-mirror commented

2026-05-05 07:10:14 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (Jul 22, 2018):

This was fixed at some point.

@chiraag-nataraj commented on GitHub (Jul 22, 2018): This was fixed at some point.

gitea-mirror referenced this issue

2026-05-05 07:12:36 -06:00

[GH-ISSUE #1387] Firejail with systemd daemon #951

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#927

No description provided.

Rows
Columns