firefox: no internet with whitelist-var-common.inc (resolv.conf) #3494
Labels
networking
Issues related to networking features (--net=, etc)
Comments
|
[daniel@daniel-pc ~]$ firejail --debug firefox > firejailfirefox2.log That warning suggests that firefox got started from within another sandboxed application. This is not normal behavior and it might explain why firefox can't connect to the network (e.g. if the sandbox profile in question does not allow network access). I suspect you used firecfg at one time to generate symlinks in /usr/local/bin and XDG desktop files in ${HOME}/.local/share/applications for firejail's desktop integration feature. Can you confirm this? If that is the case (/usr/local/bin/firefox is a symlink to /usr/bin/firejail), you can start a sandboxed firefox simply by running Can you post output from |
Indeed, I can start firefox using
[daniel@daniel-pc ~]$ which -a firefox |
|
@Evernow Use whatever start command you prefer from now on for firefox, that part of your issue should be fixed. If you notice weird theming issues in the web browser, you can try another GTK theme by prepending GTK_THEME="foo". |
Apologies if I misspoke, when I said "Indeed, I can start firefox using firefox and firejail /usr/bin/firefox" I meant that it was possible to start firefox using those two commands, but still no internet when I do so. |
|
I built firejail-git from the AUR ( https://aur.archlinux.org/packages/firejail-git/ ) and issues still persist sadly |
|
Looks like you need to comment all lines in firefox.profile and uncomment line for line to see which line make the problem. |
include firefox-common.profile That is the line causing the problem. Going through firefox-common.profile, will go through it again but not having much luck. |
Correct. Also check firefox-common.local if you have made any overrides. |
|
That's the line in firefox-common.profile causing the issue. Having issues with whitelist-var-common.inc. All of these have to be commented out, if a single one isn't then internet does not work in firefox. |
|
@Evernow can you run What is the output of |
Note I uncommented it and internet does work when started with that command.
lrwxrwxrwx 1 root root 31 Jun 17 18:59 /etc/resolv.conf -> /var/lib/expressvpn/resolv.conf |
Try to add |
Indeed that seemed to have worked, thank you very much! Do you want me to open a separate issue for the VLC issue described here #3494 (comment) ? |
|
Try to add `whitelist /var/lib/expressvpn/resolv.conf` to `whitelist-var-common.local`.
Off-topic:
#1889 (comment)
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Bug and expected behavior
For some reason when using the Firefox firejail profile, Firefox cannot connect to the internet.
Using
firejail --noprofile firefoxallows Firefox to connect.Reproduce
Steps to reproduce the behavior:
firejail firefox(sudo firecfg when launching has the same effect)Environment
LSB Version: n/a
Distributor ID: ManjaroLinux
Description: Manjaro Linux
Release: 20.0.3
Codename: Lysia
KDE
firejail version 0.9.62
Compile time support:
- AppArmor support is enabled
- AppImage support is enabled
- chroot support is enabled
- file and directory whitelisting support is enabled
- file transfer support is enabled
- firetunnel support is enabled
- networking support is enabled
- overlayfs support is enabled
- private-home support is enabled
- seccomp-bpf support is enabled
- user namespace support is enabled
- X11 sandboxing support is enabled
Additional context
Other context about the problem like related errors to understand the problem.
Checklist
find / -name 'firejail' 2>/dev/null/fd firejailto locate profiles ie in/usr/local/etc/firejail/PROGRAM.profile)OUTPUT OF
firejail --debug firefoxhttps://gist.github.com/Evernow/8f6c1b14681fa4dcd9cc82fea7989ae2
/etc/firejail/firefox.profile
https://gist.github.com/Evernow/2af871afb0554f2697857a76c773e6ef
/etc/firejail/firefox-common.profile
https://gist.github.com/Evernow/2bf72d0d41d8d66abccccf6141fb3b1b
Observations:
Other applications such as Discord and Chrome do not suffer from this, however VLC won't launch videos with firejail and qbittorrent works but I cannot launch videos from it (this seems to be #2369).
The text was updated successfully, but these errors were encountered: