{"action":"created","issue":{"url":"https://api.github.com/repos/netblue30/firejail/issues/2066","repository_url":"https://api.github.com/repos/netblue30/firejail","labels_url":"https://api.github.com/repos/netblue30/firejail/issues/2066/labels{/name}","comments_url":"https://api.github.com/repos/netblue30/firejail/issues/2066/comments","events_url":"https://api.github.com/repos/netblue30/firejail/issues/2066/events","html_url":"https://github.com/netblue30/firejail/issues/2066","id":344311709,"node_id":"MDU6SXNzdWUzNDQzMTE3MDk=","number":2066,"title":"Tor Browser cannot execute with \"noroot\" and \"nogroups\" profile","user":{"login":"Joonho365Han","id":11249677,"node_id":"MDQ6VXNlcjExMjQ5Njc3","avatar_url":"https://avatars3.githubusercontent.com/u/11249677?v=4","gravatar_id":"","url":"https://api.github.com/users/Joonho365Han","html_url":"https://github.com/Joonho365Han","followers_url":"https://api.github.com/users/Joonho365Han/followers","following_url":"https://api.github.com/users/Joonho365Han/following{/other_user}","gists_url":"https://api.github.com/users/Joonho365Han/gists{/gist_id}","starred_url":"https://api.github.com/users/Joonho365Han/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Joonho365Han/subscriptions","organizations_url":"https://api.github.com/users/Joonho365Han/orgs","repos_url":"https://api.github.com/users/Joonho365Han/repos","events_url":"https://api.github.com/users/Joonho365Han/events{/privacy}","received_events_url":"https://api.github.com/users/Joonho365Han/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"chiraag-nataraj","id":14947779,"node_id":"MDQ6VXNlcjE0OTQ3Nzc5","avatar_url":"https://avatars1.githubusercontent.com/u/14947779?v=4","gravatar_id":"","url":"https://api.github.com/users/chiraag-nataraj","html_url":"https://github.com/chiraag-nataraj","followers_url":"https://api.github.com/users/chiraag-nataraj/followers","following_url":"https://api.github.com/users/chiraag-nataraj/following{/other_user}","gists_url":"https://api.github.com/users/chiraag-nataraj/gists{/gist_id}","starred_url":"https://api.github.com/users/chiraag-nataraj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/chiraag-nataraj/subscriptions","organizations_url":"https://api.github.com/users/chiraag-nataraj/orgs","repos_url":"https://api.github.com/users/chiraag-nataraj/repos","events_url":"https://api.github.com/users/chiraag-nataraj/events{/privacy}","received_events_url":"https://api.github.com/users/chiraag-nataraj/received_events","type":"User","site_admin":false},"assignees":[{"login":"chiraag-nataraj","id":14947779,"node_id":"MDQ6VXNlcjE0OTQ3Nzc5","avatar_url":"https://avatars1.githubusercontent.com/u/14947779?v=4","gravatar_id":"","url":"https://api.github.com/users/chiraag-nataraj","html_url":"https://github.com/chiraag-nataraj","followers_url":"https://api.github.com/users/chiraag-nataraj/followers","following_url":"https://api.github.com/users/chiraag-nataraj/following{/other_user}","gists_url":"https://api.github.com/users/chiraag-nataraj/gists{/gist_id}","starred_url":"https://api.github.com/users/chiraag-nataraj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/chiraag-nataraj/subscriptions","organizations_url":"https://api.github.com/users/chiraag-nataraj/orgs","repos_url":"https://api.github.com/users/chiraag-nataraj/repos","events_url":"https://api.github.com/users/chiraag-nataraj/events{/privacy}","received_events_url":"https://api.github.com/users/chiraag-nataraj/received_events","type":"User","site_admin":false}],"milestone":null,"comments":8,"created_at":"2018-07-25T06:38:08Z","updated_at":"2018-07-25T20:55:58Z","closed_at":null,"author_association":"NONE","body":"Recreating the issue:\r\n- Firejail Version: 0.9.54-1\r\n- Tor Browser Version: 7.5.6-1\r\n- Execute: /usr/bin/firejail --profile=/etc/firejail/tor-browser-en.profile /usr/bin/tor-browser-en\r\n                              OR depending on the distro\r\n                 /usr/bin/firejail --profile=/etc/firejail/tor-browser-en.profile /usr/bin/${YOUR_EXECUTABLE}\r\n- Result: child process will exit without any warning or error messages.\r\n\r\nConsidering this happened when I updated Firejail and not Tor Browser, I assume it has something to do with how Firejail changed implementation of \"nogroups\" and \"noroot.\""},"comment":{"url":"https://api.github.com/repos/netblue30/firejail/issues/comments/407892524","html_url":"https://github.com/netblue30/firejail/issues/2066#issuecomment-407892524","issue_url":"https://api.github.com/repos/netblue30/firejail/issues/2066","id":407892524,"node_id":"MDEyOklzc3VlQ29tbWVudDQwNzg5MjUyNA==","user":{"login":"chiraag-nataraj","id":14947779,"node_id":"MDQ6VXNlcjE0OTQ3Nzc5","avatar_url":"https://avatars1.githubusercontent.com/u/14947779?v=4","gravatar_id":"","url":"https://api.github.com/users/chiraag-nataraj","html_url":"https://github.com/chiraag-nataraj","followers_url":"https://api.github.com/users/chiraag-nataraj/followers","following_url":"https://api.github.com/users/chiraag-nataraj/following{/other_user}","gists_url":"https://api.github.com/users/chiraag-nataraj/gists{/gist_id}","starred_url":"https://api.github.com/users/chiraag-nataraj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/chiraag-nataraj/subscriptions","organizations_url":"https://api.github.com/users/chiraag-nataraj/orgs","repos_url":"https://api.github.com/users/chiraag-nataraj/repos","events_url":"https://api.github.com/users/chiraag-nataraj/events{/privacy}","received_events_url":"https://api.github.com/users/chiraag-nataraj/received_events","type":"User","site_admin":false},"created_at":"2018-07-25T20:55:58Z","updated_at":"2018-07-25T20:55:58Z","author_association":"COLLABORATOR","body":"I'm not talking about the `apparmor` option in `firejail`, which turns on _firejail_'s apparmor profile. I'm talking about a profile for the tor browser that might have been shipped with the tor browser. Even if you don't turn on `apparmor` in `firejail`, if there's a matching profile that's been enabled (and some distros enable apparmor profiles by default), then that will still cause problems. One way you can see this is by looking in the system log (e.g. `journalctl`) to see if you get apparmor messages."}}
{"actor":{"display_login":"chiraag-nataraj"}}