Score:0

Ubuntu

How to run Firefox in Firejail?

flapjack

10/19/23, 6:50 AM

I'm trying to run Firefox in firejail, on Ubuntu 22.04.1.

When I use firejail firefox, I get:

Reading profile /etc/firejail/firefox.profile
Reading profile /etc/firejail/whitelist-usr-share-common.inc
Reading profile /etc/firejail/firefox-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-runuser-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Warning: networking feature is disabled in Firejail configuration file
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Parent pid 4178, child pid 4197
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Warning: cleaning all supplementary groups
Warning: cleaning all supplementary groups
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Child process initialized in 110.56 ms
panic: permission denied

goroutine 1 [running]:
github.com/snapcore/snapd/snapdtool.ExecInSnapdOrCoreSnap()
    /build/snapd-fBNDak/snapd-2.56.2+22.04ubuntu1/snapdtool/tool_linux.go:205 +0x40e
main.main()
    /build/snapd-fBNDak/snapd-2.56.2+22.04ubuntu1/cmd/snap/main.go:443 +0x45

Parent is shutting down, bye...

When I use sudo firejail firefox, I get:

Reading profile /etc/firejail/firefox.profile
Reading profile /etc/firejail/whitelist-usr-share-common.inc
Reading profile /etc/firejail/firefox-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-runuser-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Warning: noroot option is not available
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown, DBus user socket was not found.

Unfortunately I don't really understand what the computer is saying. I've also installed Firetools, but clicking on the Firefox icon from there doesn't seem to do anything.

What do I need to do to get it working?

1181

1 + 5

firefox

firejail

David

10/19/23, 6:52 AM

You need to remove the Firefox snap version and install the apt version.

24601

10/19/23, 8:12 AM

is this helpful? https://unix.stackexchange.com/questions/561694/sandboxing-firefox-using-firejail-download-directory

Mietek

4/17/24, 8:40 PM

Not all sandboxes are equal. For example: Firejail does not allow to write outside Downloads. Sandbox does not prevent such writing.

somenxavier

5/26/24, 9:33 AM

In arch the tor-browser works with firejail but firefox does not. As tor-browser is based one firefox-esr version, I think firefox-esr probably would work with firejail. Another point of work could be to copy the profile of tor-browser and modify it to be the firefox profile. Try it.

somenxavier

5/26/24, 2:25 PM

@flapjack Confirmed: firefox-esr works in archlinux while firefox does not: `firejail --env=LD_PRELOAD='/usr/lib/libhardened_malloc.so' --net=wlan0 --seccomp firefox-esr`

Score:1

Ubuntu

vanadium

10/19/23, 2:27 PM

The default version of Firefox in Ubuntu is installed using the snap technology. This already runs Firefox in a sand box. Therefore, there is no need for you to run that version in Firejail. Like you experience, you actually can not.

+ 1

flapjack

10/23/23, 3:15 AM

Ah, I did not realize it was already running in a sandbox. Thank you for your help!

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: How to run Firefox in Firejail?

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.