SOLVED FireJail Firefox Not Connecting to Internet

[baker]

Hi I am running Linux Mint Tara 32 bit Cinnamon GU . Have installed Firejail 9.52.2 and the firetoolsand profiles manager etc via the synaptic manager. Running Firefox 65.0 32 bit. Connecting to the Internet via a Netgear router. Using GUFW firewall.

When I open Firefox from either the command prompt using firejail firefox - or via the Firelauncher application - Firefox application opens but does not connect to the net. I am able to open the standalone version of Firefox and connect to the net.

Any help will be much appreciated. baker

[trytip]

would be nice to see those commands and some basic info on your system.

[all41]

You mention a 'standalone' version of firefox.
Where is this directory located?
Do you also have an installed version?
Please open a terminal and enter:

Code: Select all

ls ~/.config/firejail/

and

Code: Select all

which firejail

When you open FF that will not connect to internet in a terminal enter:

Code: Select all

firejail --list

and

Code: Select all

firejail

Post those results to this thread, as well as the inquiry:

Code: Select all

inxi -Fxz

[baker]

Hi thanks for your response here is the responses for the respective commands the users account name has been substituted for username.

ls ~/.config/firejail/
ls: cannot access '/home/USERnAME/.config/firejail/': No such file or directory
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
which firejail
/usr/bin/firejail
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
firejail --list
3370:userNAME:firejail --list
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
firejail
Reading profile /etc/firejail/default.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc

** Note: you can use --noprofile to disable default.profile **

Parent pid 3399, child pid 3400
Child process initialized in 102.04 ms
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
inxi -Fxz
System: Host: interaccess Kernel: 4.15.0-45-generic i686
bits: 32 gcc: 7.3.0
Desktop: Cinnamon 3.8.9 (Gtk 3.22.30-1ubuntu1)
Distro: Linux Mint 19 Tara
Machine: Device: laptop System: Trigem product: Little LLUON S2 serial: N/A
Mobo: AVERATEC and TRIGEM model: TGDII Series serial: N/A
BIOS: American Megatrends v: 080014 date: 03/30/2007
CPU: Dual core Intel T2060 (-MCP-) arch: Yonah rev.12 cache: 1024 KB
flags: (nx pae sse sse2 sse3) bmips: 6384
clock speeds: max: 1596 MHz 1: 1596 MHz 2: 1596 MHz
Graphics: Card: Intel Mobile 945GM/GMS 943/940GML Express Integrated Graphics Controller
bus-ID: 00:02.0
Display Server: x11 (X.Org 1.19.6 ) driver: i915
Resolution: 1440x900@59.89hz
OpenGL: renderer: Mesa DRI Intel 945GM x86/MMX/SSE2
version: 1.4 Mesa 18.2.2 Direct Render: Yes
Audio: Card Intel NM10/ICH7 Family High Def. Audio Controller
driver: snd_hda_intel bus-ID: 00:1b.0
Sound: Advanced Linux Sound Architecture v: k4.15.0-45-generic
Network: Card: Intel NM10/ICH7 Family LAN Controller
driver: e100 port: ec00 bus-ID: 01:08.0
IF: enp1s8 state: up speed: 100 Mbps duplex: full mac: <filter>
Drives: HDD Total Size: 240.1GB (7.7% used)
ID-1: /dev/sda model: WDC_WDS240G2G0A size: 240.1GB
Partition: ID-1: / size: 32G used: 18G (58%) fs: ext4 dev: /dev/sda1
ID-2: /home size: 1003M used: 0 (0%) fs: ext4 dev: /dev/sda3
RAID: No RAID devices: /proc/mdstat, md_mod kernel module present
Sensors: System Temperatures: cpu: 60.0C mobo: N/A
Fan Speeds (in rpm): cpu: N/A
Info: Processes: 6 Uptime: 43 min Memory: 839.0/2004.3MB
Init: N/A Gcc sys: 7.3.0 Client: Shell (bash 4.4.191) inxi: 2.3.56

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
END

[trytip]

all you need is to backtrace firejail:

Code: Select all

firejaill --version
firejail firefox

[baker]

Hi I am sorry I am not with you when you say all you need is to backtrace firejail:. Please can you provide further details. Many thanks.

[trytip]

all you need is to backtrace firejail:

Code: Select all

firejaill --version
firejail firefox

[Pjotr]

Have installed Firejail 9.52.2 and the firetoolsand profiles manager etc via the synaptic manager.

Install the latest Firejail LTS (currently 0.9.56-LTS_1) from upstream:
https://sourceforge.net/projects/fireja ... b/download

Explanation:
https://easylinuxtipsproject.blogspot.c ... html#ID2.1
(item 2.1)

[Fred Barclay]

Hi baker,
Based on what you've said, I believe you've installed firejail from the Mint repos? Is that correct? If so, I believe you're missing the firejail-profiles package. Please install it like so:

Code: Select all

sudo apt install firejail-profiles

Now try running firejail firefox. Does it connect to the internet?

Cheers!
Fred

(Note for reference: firejail in the repositories is split into two packages: firejail proper, which contains the firejail program and some minimal profiles, and firejail-profiles, which actually contains the badly-needed program profiles like the one for firefox. In this case, since firejail-profiles is probably not installed, the firejail profile for firefox is not installed on the OP's system and so firejail falls back to using the "default" profile which should, in fact, block internet access.)

[all41]

@Fred Barclay knows these matters as he is involved with the dev team.
But to say I am somewhat suspicious of his kinfolk though
elbow

[Pjotr]

Hi baker,
Based on what you've said, I believe you've installed firejail from the Mint repos? Is that correct? If so, I believe you're missing the firejail-profiles package. Please install it like so:

Code: Select all

sudo apt install firejail-profiles

Now try running firejail firefox. Does it connect to the internet?

Cheers!
Fred

(Note for reference: firejail in the repositories is split into two packages: firejail proper, which contains the firejail program and some minimal profiles, and firejail-profiles, which actually contains the badly-needed program profiles like the one for firefox. In this case, since firejail-profiles is probably not installed, the firejail profile for firefox is not installed on the OP's system and so firejail falls back to using the "default" profile which should, in fact, block internet access.)

For Chrome and Chromium, that works fine. But not for Firefox.... Perhaps the Firefox profile in the Mint repo version of firejail-profiles, contains a flaw?

[baker]

Hi when I run the command this is the output. Still unable to connect to the internet via firejail firefox!

when I run install profiles command this is the output.
:~$ sudo apt install firejail-profiles
[sudo] password for :
Reading package lists... Done
Building dependency tree
Reading state information... Done
firejail-profiles is already the newest version (0.9.52-2).
firejail-profiles set to manually installed.
The following packages were automatically installed and are no longer required:
linux-headers-4.15.0-42 linux-headers-4.15.0-42-generic
linux-image-4.15.0-42-generic linux-modules-4.15.0-42-generic
linux-modules-extra-4.15.0-42-generic
Use 'sudo apt autoremove' to remove them.
0 upgraded, 0 newly installed, 0 to remove and 27 not upgraded.

When I run firejail firefox this is the output and I am still unable to connect to the internet.
s@s:~$ firejail firefox
Reading profile /etc/firejail/firefox.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 1738, child pid 1739
Blacklist violations are logged to syslog
Child process initialized in 130.79 ms

Many thanks.

[redlined]

recommend you look at Pjotr's response and follow his guide on https://easylinuxtipsproject.blogspot.c ... html#ID2.1

start by apt purge firejail firejail-profiles command in terminal, then install the upstream packages as shown above (add firetools package to new install of firejail&firejail-profiles as well, it is a useful package for launchers, especially if you do not integrate firejail fully into desktop by using command: sudo firecfg)

although I suspect something else is interfering with firefox connecting while firejailed

if you do open in terminal firejail firefox it may prove useful to attempt a couple websites then close browser in terminal window (hit Ctrl+c to end the process in terminal) and copy that entire terminal output into reply between code blocks which you create by click the </> icon (top left of reply box). This should give a better idea of what happened including any traceback messages that may be important to consider.

also useful is dev blog/docs, check here for firefox in particular (and read comments, tons of tips in there)
https://firejail.wordpress.com/document ... fox-guide/

[redlined]

all you need is to backtrace firejail:

Code: Select all

firejaill --version
firejail firefox

spelling: firejail --version

[trytip]

spelling: firejail --version

ooops
i don't even bother anymore with firejail LTS or what's in the repos. if i use firejail i use the developer version since that is the most up to date https://github.com/netblue30/firejail
in fact i'm building it right now, instructions are on page. if i have to say uninstall all version of it before building the githiub i'd just be stating the obvious since building packages usually put's them in the local directory of your root locate firejail will give you the whereabouts

[redlined]

spelling: firejail --version

ooops
i don't even bother anymore with firejail LTS or what's in the repos. if i use firejail i use the developer version since that is the most up to date https://github.com/netblue30/firejail

been doing the same here, well not building yet, but running latest release .deb from dev/git. also worth looking into is other profile packages put up elsewhere as noted here:
https://github.com/netblue30/firejail#security-profiles

(ps, Fred, this thread, does indeed appear to be >/= netblue30, as outed by all41, which to me is....concerned.dev.overwatch.awesomesauce in the continual.making;)

[Fred Barclay]

(ps, Fred, this thread, does indeed appear to be >/= netblue30, as outed by all41, which to me is....concerned.dev.overwatch.awesomesauce in the continual.making;)

Not quite sure I understand this...

[redlined]

Not quite sure I understand this...

I think that was typed out between 3 tequila and floor

(big firejail fan, although my windows born concerns dissipated quick I never got past wanting a sandboxie replacement- was an early adopter of the concept and prog beta testing finding dev to be very responsive way back when. Always refreshing to see, even moreso the actives in LM forums, boosts my appreciation for the distro 100 fold seeing the insiders we have participating here. so... Thanks!

[baker]

Hi redlined trust I have interpreted your instructions correctly. the output is as follows thanks for your help on this one it is beginning to bug me no pun intended.

1. apt purge firejail firejail-profiles
[sudo] password for USER:
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages were automatically installed and are no longer required:
linux-headers-4.15.0-42 linux-headers-4.15.0-42-generic
linux-image-4.15.0-42-generic linux-modules-4.15.0-42-generic
linux-modules-extra-4.15.0-42-generic
Use 'sudo apt autoremove' to remove them.
The following packages will be REMOVED:
firejail* firejail-profiles* firetools*
0 upgraded, 0 newly installed, 3 to remove and 38 not upgraded.
After this operation, 2,052 kB disk space will be freed.
Do you want to continue? [Y/n] y
(Reading database ... 348833 files and directories currently installed.)
Removing firetools (0.9.50-1) ...
Removing firejail-profiles (0.9.52-2) ...
Removing firejail (0.9.52-2) ...
Processing triggers for mime-support (3.60ubuntu1) ...
Processing triggers for desktop-file-utils (0.23+linuxmint4) ...
Processing triggers for man-db (2.8.3-2ubuntu0.1) ...
Processing triggers for gnome-menus (3.13.3-11ubuntu1.1) ...
(Reading database ... 348769 files and directories currently installed.)
Purging configuration files for firejail (0.9.52-2) ...
Purging configuration files for firejail-profiles (0.9.52-2) ...
___________________________________________________________________________________________--
2. sudo apt install firejail-profiles
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages were automatically installed and are no longer required:
linux-headers-4.15.0-42 linux-headers-4.15.0-42-generic
linux-image-4.15.0-42-generic linux-modules-4.15.0-42-generic
linux-modules-extra-4.15.0-42-generic
Use 'sudo apt autoremove' to remove them.
The following additional packages will be installed:
firejail
The following NEW packages will be installed:
firejail firejail-profiles
0 upgraded, 2 newly installed, 0 to remove and 38 not upgraded.
Need to get 293 kB of archives.
After this operation, 1,441 kB of additional disk space will be used.
Do you want to continue? [Y/n] y
Get:1 http://archive.ubuntu.com/ubuntu bionic/universe i386 firejail i386 0.9.52-2 [258 kB]
Get:2 http://archive.ubuntu.com/ubuntu bionic/universe i386 firejail-profiles all 0.9.52-2 [34.8 kB]
Fetched 293 kB in 1s (434 kB/s)
Selecting previously unselected package firejail.
(Reading database ... 348329 files and directories currently installed.)
Preparing to unpack .../firejail_0.9.52-2_i386.deb ...
Unpacking firejail (0.9.52-2) ...
Selecting previously unselected package firejail-profiles.
Preparing to unpack .../firejail-profiles_0.9.52-2_all.deb ...
Unpacking firejail-profiles (0.9.52-2) ...
Setting up firejail (0.9.52-2) ...
Setting up firejail-profiles (0.9.52-2) ...
Processing triggers for man-db (2.8.3-2ubuntu0.1) ...
______________________________________________________________________________--
3 a. ~$ firejail firefox
Reading profile /etc/firejail/firefox.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 6440, child pid 6441
Blacklist violations are logged to syslog
Child process initialized in 117.84 ms
______________________________________________________________________________________________________
3.b When I close the firefox app after it has not connected to the internet this is the rest of the output in the terminal window.
Blacklist violations are logged to syslog
Child process initialized in 117.84 ms
[Parent 7, Gecko_IOThread] WARNING: pipe error (72): Connection reset by peer: file /build/firefox-89cxoO/firefox-65.0+linuxmint1+tessa/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 349
[Parent 7, Gecko_IOThread] WARNING: pipe error (66): Connection reset by peer: file /build/firefox-89cxoO/firefox-65.0+linuxmint1+tessa/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 349
[Parent 7, Gecko_IOThread] WARNING: pipe error (103): Connection reset by peer: file /build/firefox-89cxoO/firefox-65.0+linuxmint1+tessa/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 349
[Parent 7, Gecko_IOThread] WARNING: pipe error (97): Connection reset by peer: file /build/firefox-89cxoO/firefox-65.0+linuxmint1+tessa/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 349
Parent is shutting down, bye...
_____________________________________________________________________________________
3c If I close the terminal using ctrl+c this is the output from the terminal window.

firejail firefox
Reading profile /etc/firejail/firefox.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 6639, child pid 6640
Blacklist violations are logged to syslog
Child process initialized in 112.20 ms
^C
Parent received signal 2, shutting down the child process...

Parent is shutting down, bye...

Child received signal 15, shutting down the sandbox...
_______________________________________________________________________________-

[trytip]

EDIT: