{"action":"created","issue":{"url":"https://api.github.com/repos/netblue30/firejail/issues/958","repository_url":"https://api.github.com/repos/netblue30/firejail","labels_url":"https://api.github.com/repos/netblue30/firejail/issues/958/labels{/name}","comments_url":"https://api.github.com/repos/netblue30/firejail/issues/958/comments","events_url":"https://api.github.com/repos/netblue30/firejail/issues/958/events","html_url":"https://github.com/netblue30/firejail/issues/958","id":193638979,"number":958,"title":"Qutebrowser fails to load with qutebrowser.conf profile and webengine backend","user":{"login":"craftyguy","id":1474209,"avatar_url":"https://avatars.githubusercontent.com/u/1474209?v=3","gravatar_id":"","url":"https://api.github.com/users/craftyguy","html_url":"https://github.com/craftyguy","followers_url":"https://api.github.com/users/craftyguy/followers","following_url":"https://api.github.com/users/craftyguy/following{/other_user}","gists_url":"https://api.github.com/users/craftyguy/gists{/gist_id}","starred_url":"https://api.github.com/users/craftyguy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/craftyguy/subscriptions","organizations_url":"https://api.github.com/users/craftyguy/orgs","repos_url":"https://api.github.com/users/craftyguy/repos","events_url":"https://api.github.com/users/craftyguy/events{/privacy}","received_events_url":"https://api.github.com/users/craftyguy/received_events","type":"User","site_admin":false},"labels":[{"id":245694819,"url":"https://api.github.com/repos/netblue30/firejail/labels/bug","name":"bug","color":"fc2929","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-12-05T23:17:54Z","updated_at":"2016-12-08T18:47:44Z","closed_at":null,"body":"Using firejail 0.9.44.2 and qutebrowser from git, along with an unmodified profile file, I get this when launching qutebrowser.\r\n\r\nQutebrowser runs fine in firejail when using the webkit backend.\r\n\r\nI noticed some commits recently for qutebrowser specifically, so I built firejail from git (latest as of this edit) and still see the same issue.\r\n\r\n```\r\n$ firejail qutebrowser --backend=webengine\r\nReading profile /etc/firejail/qutebrowser.profile\r\nReading profile /etc/firejail/disable-common.inc\r\nReading profile /etc/firejail/disable-programs.inc\r\nReading profile /etc/firejail/disable-devel.inc\r\nReading profile /etc/firejail/whitelist-common.inc\r\nParent pid 6682, child pid 6683\r\nWarning: /sbin directory link was not blacklisted\r\nWarning: /usr/sbin directory link was not blacklisted\r\nBlacklist violations are logged to syslog\r\nChild process initialized\r\n[1205/150458:ERROR:browser_main_loop.cc(217)] Running without the SUID sandbox! See https://chromium.googlesource.com/chromium/src/+/master/docs/linux_suid_sandbox_development.md for more information on developing with the sandbox on.\r\n[1205/150458:FATAL:credentials.cc(317)] Check failed: ChrootToSafeEmptyDir().\r\n#0 0x7ff127730e5e base::debug::StackTrace::StackTrace()\r\n#1 0x7ff12774850e logging::LogMessage::~LogMessage()\r\n#2 0x7ff1273cfa38 sandbox::Credentials::DropFileSystemAccess()\r\n#3 0x7ff1270e99df content::LinuxSandbox::EngageNamespaceSandbox()\r\n#4 0x7ff126b69f00 content::ZygoteMain()\r\n#5 0x7ff1269eee20 content::RunZygote()\r\n#6 0x7ff1269ef499 content::ContentMainRunnerImpl::Run()\r\n#7 0x7ff1269edac9 content::ContentMain()\r\n#8 0x7ff125ea52f4 QtWebEngine::processMain()\r\n#9 0x0000004006d3 main\r\n#10 0x7ff124e35291 __libc_start_main\r\n#11 0x00000040072a _start\r\n\r\nReceived signal 6\r\n#0 0x7ff127730e5e base::debug::StackTrace::StackTrace()\r\n#1 0x7ff127731239 base::debug::(anonymous namespace)::StackDumpSignalHandler()\r\n#2 0x7ff124e480b0 <unknown>\r\n#3 0x7ff124e4804f __GI_raise\r\n#4 0x7ff124e4947a __GI_abort\r\n#5 0x7ff127730625 base::debug::BreakDebugger()\r\n#6 0x7ff127748675 logging::LogMessage::~LogMessage()\r\n#7 0x7ff1273cfa38 sandbox::Credentials::DropFileSystemAccess()\r\n#8 0x7ff1270e99df content::LinuxSandbox::EngageNamespaceSandbox()\r\n#9 0x7ff126b69f00 content::ZygoteMain()\r\n#10 0x7ff1269eee20 content::RunZygote()\r\n#11 0x7ff1269ef499 content::ContentMainRunnerImpl::Run()\r\n#12 0x7ff1269edac9 content::ContentMain()\r\n#13 0x7ff125ea52f4 QtWebEngine::processMain()\r\n#14 0x0000004006d3 main\r\n#15 0x7ff124e35291 __libc_start_main\r\n#16 0x00000040072a _start\r\n  r8: 0000000000000000  r9: 00007fffdc927bc0 r10: 0000000000000008 r11: 0000000000000246\r\n r12: 00007fffdc927e20 r13: 00007fffdc9284e8 r14: 00007fffdc927e30 r15: 0000000000000000\r\n  di: 0000000000000002  si: 00007fffdc927bc0  bp: 00007fffdc928060  bx: 0000000000000006\r\n  dx: 0000000000000000  ax: 0000000000000000  cx: 00007ff124e4804f  sp: 00007fffdc927c38\r\n  ip: 00007ff124e4804f efl: 0000000000000246 cgf: 002b000000000033 erf: 0000000000000000\r\n trp: 0000000000000000 msk: 0000000000000000 cr2: 0000000000000000\r\n[end of stack trace]\r\n```\r\n"},"comment":{"url":"https://api.github.com/repos/netblue30/firejail/issues/comments/265820749","html_url":"https://github.com/netblue30/firejail/issues/958#issuecomment-265820749","issue_url":"https://api.github.com/repos/netblue30/firejail/issues/958","id":265820749,"user":{"login":"craftyguy","id":1474209,"avatar_url":"https://avatars.githubusercontent.com/u/1474209?v=3","gravatar_id":"","url":"https://api.github.com/users/craftyguy","html_url":"https://github.com/craftyguy","followers_url":"https://api.github.com/users/craftyguy/followers","following_url":"https://api.github.com/users/craftyguy/following{/other_user}","gists_url":"https://api.github.com/users/craftyguy/gists{/gist_id}","starred_url":"https://api.github.com/users/craftyguy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/craftyguy/subscriptions","organizations_url":"https://api.github.com/users/craftyguy/orgs","repos_url":"https://api.github.com/users/craftyguy/repos","events_url":"https://api.github.com/users/craftyguy/events{/privacy}","received_events_url":"https://api.github.com/users/craftyguy/received_events","type":"User","site_admin":false},"created_at":"2016-12-08T18:47:44Z","updated_at":"2016-12-08T18:47:44Z","body":"> This is something new, it tries to rise privileges and install a suid sandbox. What happens if you run \"firejail qutebrowser\"? I assume this will use a different backend.\r\n\r\nExactly, it defaults to using webkit backend (which works OK with firejail), but that's not a desirable backend to use with qutebrowser. The QT Webengine backend is based off of chromium, and supports sandboxing, which may be what that message is.\r\n\r\nDo you see the issue I see if you run qutebrowser with ```firejail qutebrowser --backend=webengine``` ?"}}
{"actor":{"display_login":"craftyguy"}}