{"action":"created","issue":{"url":"https://api.github.com/repos/netblue30/firejail/issues/820","repository_url":"https://api.github.com/repos/netblue30/firejail","labels_url":"https://api.github.com/repos/netblue30/firejail/issues/820/labels{/name}","comments_url":"https://api.github.com/repos/netblue30/firejail/issues/820/comments","events_url":"https://api.github.com/repos/netblue30/firejail/issues/820/events","html_url":"https://github.com/netblue30/firejail/issues/820","id":179574102,"number":820,"title":"dnscrypt-proxy.profile fails with private-dev option enabled","user":{"login":"glitsj16","id":959378,"avatar_url":"https://avatars.githubusercontent.com/u/959378?v=3","gravatar_id":"","url":"https://api.github.com/users/glitsj16","html_url":"https://github.com/glitsj16","followers_url":"https://api.github.com/users/glitsj16/followers","following_url":"https://api.github.com/users/glitsj16/following{/other_user}","gists_url":"https://api.github.com/users/glitsj16/gists{/gist_id}","starred_url":"https://api.github.com/users/glitsj16/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/glitsj16/subscriptions","organizations_url":"https://api.github.com/users/glitsj16/orgs","repos_url":"https://api.github.com/users/glitsj16/repos","events_url":"https://api.github.com/users/glitsj16/events{/privacy}","received_events_url":"https://api.github.com/users/glitsj16/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/netblue30/firejail/labels/bug","name":"bug","color":"fc2929"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":11,"created_at":"2016-09-27T18:25:41Z","updated_at":"2016-09-27T21:28:52Z","closed_at":null,"body":"/etc/firejail/dnscrypt-proxy.profile (latest firejail from git) seems to have a problem with 'private-dev' option:\r\n\r\n$ lsb_release -d\r\nDescription:\tUbuntu 16.04.1 LTS\r\n\r\ndnscrypt-proxy compiled from latest git\r\n$ dnscrypt-proxy -V\r\ndnscrypt-proxy 1.7.0\r\n\r\n$ cat /etc/firejail/dnscrypt-proxy\r\n`#` security profile for dnscrypt-proxy\r\nnoblacklist /sbin\r\nnoblacklist /usr/sbin\r\ninclude /etc/firejail/disable-common.inc\r\ninclude /etc/firejail/disable-programs.inc\r\ninclude /etc/firejail/disable-devel.inc\r\ninclude /etc/firejail/disable-passwdmgr.inc\r\n\r\nprivate\r\nprivate-dev\r\nnosound\r\nseccomp.drop mount,umount2,ptrace,kexec_load,kexec_file_load,open_by_handle_at,init_module,finit_module,delete_module,iopl,ioperm,swapon,swapoff,syslog,process_vm_readv,process_vm_writev,sysfs,_sysctl,adjtimex,clock_adjtime,lookup_dcookie,perf_event_open,fanotify_init,kcmp,add_key,request_key,keyctl,uselib,acct,modify_ldt,pivot_root,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,mbind,get_mempolicy,set_mempolicy,migrate_pages,move_pages,vmsplice,perf_event_open\r\n\r\n$  sudo /usr/bin/firejail --noblacklist=/usr/local/sbin dnscrypt-proxy --local-address=127.0.2.1 --resolver-name=dnscrypt.eu-dk --user=dnscrypt --ephemeral-keys  --plugin=libdcplugin_example_ldns_aaaa_blocking.so\r\nReading profile /etc/firejail/dnscrypt-proxy.profile\r\nReading profile /etc/firejail/disable-common.inc\r\nReading profile /etc/firejail/disable-programs.inc\r\nReading profile /etc/firejail/disable-devel.inc\r\nReading profile /etc/firejail/disable-passwdmgr.inc\r\nParent pid 21256, child pid 21257\r\nThe new log directory is /proc/21257/root/var/log\r\nError mounting /dev/snd: fs_dev.c:68 deventry_mount: Not a directory\r\nError: cannot establish communication with the parent, exiting...\r\n\r\nRunning\r\n$ sudo /usr/bin/firejail --ignore=private-dev --noblacklist=/usr/local/sbin dnscrypt-proxy --local-address=127.0.2.1 --resolver-name=dnscrypt.eu-dk --user=dnscrypt --ephemeral-keys  --plugin=libdcplugin_example_ldns_aaaa_blocking.so\r\nworks as expected..\r\n\r\nRegards"},"comment":{"url":"https://api.github.com/repos/netblue30/firejail/issues/comments/250004579","html_url":"https://github.com/netblue30/firejail/issues/820#issuecomment-250004579","issue_url":"https://api.github.com/repos/netblue30/firejail/issues/820","id":250004579,"user":{"login":"glitsj16","id":959378,"avatar_url":"https://avatars.githubusercontent.com/u/959378?v=3","gravatar_id":"","url":"https://api.github.com/users/glitsj16","html_url":"https://github.com/glitsj16","followers_url":"https://api.github.com/users/glitsj16/followers","following_url":"https://api.github.com/users/glitsj16/following{/other_user}","gists_url":"https://api.github.com/users/glitsj16/gists{/gist_id}","starred_url":"https://api.github.com/users/glitsj16/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/glitsj16/subscriptions","organizations_url":"https://api.github.com/users/glitsj16/orgs","repos_url":"https://api.github.com/users/glitsj16/repos","events_url":"https://api.github.com/users/glitsj16/events{/privacy}","received_events_url":"https://api.github.com/users/glitsj16/received_events","type":"User","site_admin":false},"created_at":"2016-09-27T21:28:52Z","updated_at":"2016-09-27T21:28:52Z","body":"No problem, glad I could help.\r\n"}}
{"actor":{"display_login":"glitsj16"}}