Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Slack (Arch Linux AUR) doesn't work with default firejail configuration #4329

Closed
7 tasks done
alxjsn opened this issue Jun 3, 2021 · 3 comments
Closed
7 tasks done

Slack (Arch Linux AUR) doesn't work with default firejail configuration #4329

alxjsn opened this issue Jun 3, 2021 · 3 comments

Comments

@alxjsn
Copy link
Contributor

alxjsn commented Jun 3, 2021 •
edited
Loading

Bug and expected behavior

slack
Reading profile /etc/firejail/slack.profile
Reading profile /etc/firejail/disable-shell.inc
Reading profile /etc/firejail/electron.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 14864, child pid 14865
2 programs installed in 2.15 ms
Warning: skipping asound.conf for private /etc
Warning: skipping crypto-policies for private /etc
Warning: skipping debian_version for private /etc
Warning: skipping fedora-release for private /etc
Warning fcopy: skipping /etc/fonts/conf.d/70-no-bitmaps.conf, cannot find inode
Warning fcopy: skipping /etc/fonts/conf.d/11-lcdfilter-default.conf, cannot find inode
Warning fcopy: skipping /etc/fonts/conf.d/10-sub-pixel-rgb.conf, cannot find inode
Warning: skipping pki for private /etc
Warning: skipping redhat-release for private /etc
Warning: skipping system-release for private /etc
Warning: skipping system-release-cpe for private /etc
Private /etc installed in 28.87 ms
Private /usr/etc installed in 0.00 ms
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Child process initialized in 116.51 ms
Cannot start application: No such file or directory

Parent is shutting down, bye...
  • What did you expect to happen?
    Slack should successfully run with the defaults.

No profile and disabling firejail

  • What changed calling firejail --noprofile /path/to/program in a terminal?
  • What changed calling the program by path (e.g. /usr/bin/vlc)?

Slack successfully runs with no profile and running it directly without firejail.

Reproduce
Steps to reproduce the behavior:

  1. Install Slack from AUR
  2. Run Slack

Environment

  • Linux distribution and version (ie output of lsb_release -a, screenfetch or cat /etc/os-release)
lsb_release -a
LSB Version:	1.4
Distributor ID:	Arch
Description:	Arch Linux
Release:	rolling
Codename:	n/a
  • Firejail version (output of firejail --version) exclusive or used git commit (git rev-parse HEAD)
firejail --version
firejail version 0.9.65

Compile time support:
	- Always force nonewprivs support is disabled
	- AppArmor support is enabled
	- AppImage support is enabled
	- chroot support is enabled
	- D-BUS proxy support is enabled
	- file and directory whitelisting support is enabled
	- file transfer support is enabled
	- firetunnel support is enabled
	- networking support is enabled
	- output logging is enabled
	- overlayfs support is disabled
	- private-home support is enabled
	- private-cache and tmpfs as user enabled
	- SELinux support is disabled
	- user namespace support is enabled
	- X11 sandboxing support is enabled

Additional context
The file /usr/bin/slack installed by the Slack AUR package is the following:

#!/bin/sh

exec electron /usr/lib/slack/app.asar "$@"

I found that commenting out the following two lines fixed the issue:

include disable-shell.inc
private-bin locale,slack

Checklist

  • The profile (and redirect profile if exists) hasn't already been fixed upstream.
  • The program has a profile. (If not, request one in https://github.com/netblue30/firejail/issues/1139)
  • I have performed a short search for similar issues (to avoid opening a duplicate).
  • If it is a AppImage, --profile=PROFILENAME is used to set the right profile.
  • Used LC_ALL=en_US.UTF-8 LANG=en_US.UTF-8 PROGRAM to get english error-messages.
  • I'm aware of browser-allow-drm yes/browser-disable-u2f no in firejail.config to allow DRM/U2F in browsers.
  • This is not a question. Questions should be asked in https://github.com/netblue30/firejail/discussions.
debug output 
Autoselecting /usr/bin/fish as shell
Building quoted command line: 'slack'
Command name #slack#
Found slack.profile profile in /etc/firejail directory
Reading profile /etc/firejail/slack.profile
Found slack.local profile in /home/alxjsn/.config/firejail directory
Found disable-shell.inc profile in /etc/firejail directory
Reading profile /etc/firejail/disable-shell.inc
Found electron.profile profile in /etc/firejail directory
Reading profile /etc/firejail/electron.profile
Found disable-common.inc profile in /etc/firejail directory
Reading profile /etc/firejail/disable-common.inc
Found disable-devel.inc profile in /etc/firejail directory
Reading profile /etc/firejail/disable-devel.inc
Found disable-interpreters.inc profile in /etc/firejail directory
Reading profile /etc/firejail/disable-interpreters.inc
Found disable-passwdmgr.inc profile in /etc/firejail directory
Reading profile /etc/firejail/disable-passwdmgr.inc
Found disable-programs.inc profile in /etc/firejail directory
Reading profile /etc/firejail/disable-programs.inc
Found whitelist-common.inc profile in /etc/firejail directory
Reading profile /etc/firejail/whitelist-common.inc
Found whitelist-var-common.inc profile in /etc/firejail directory
Reading profile /etc/firejail/whitelist-var-common.inc
DISPLAY=:0 parsed as 0
Using the local network stack
Parent pid 15376, child pid 15377
Initializing child process
Host network configured
PID namespace installed
Mounting tmpfs on /run/firejail/mnt directory
Creating empty /run/firejail/mnt/seccomp directory
Creating empty /run/firejail/mnt/seccomp/seccomp.protocol file
Creating empty /run/firejail/mnt/seccomp/seccomp.postexec file
Creating empty /run/firejail/mnt/seccomp/seccomp.postexec32 file
Mounting /proc filesystem representing the PID namespace
Basic read-only filesystem:
Mounting read-only /etc
2090 2062 254:0 /etc /etc ro,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2090 fsname=/etc dir=/etc fstype=ext4
Mounting noexec /etc
2091 2090 254:0 /etc /etc ro,nosuid,nodev,noexec,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2091 fsname=/etc dir=/etc fstype=ext4
Mounting read-only /var
2092 2062 254:0 /var /var ro,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2092 fsname=/var dir=/var fstype=ext4
Mounting noexec /var
2093 2092 254:0 /var /var ro,nosuid,nodev,noexec,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2093 fsname=/var dir=/var fstype=ext4
Mounting read-only /usr
2094 2062 254:0 /usr /usr ro,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2094 fsname=/usr dir=/usr fstype=ext4
Mounting tmpfs on /var/lock
Mounting tmpfs on /var/tmp
Mounting tmpfs on /var/log
Mounting tmpfs on /var/lib/dhcp
Mounting tmpfs on /var/lib/nginx
Create the new utmp file
Mount the new utmp file
Cleaning /home directory
Cleaning /run/user directory
Sanitizing /etc/passwd, UID_MIN 1000
Sanitizing /etc/group, GID_MIN 1000
Disable /home/alxjsn/.config/firejail
Disable /run/firejail/network
Disable /run/firejail/bandwidth
Disable /run/firejail/name
Disable /run/firejail/profile
Disable /run/firejail/x11
Mounting tmpfs on /dev
mounting /run/firejail/mnt/dev/snd directory
mounting /run/firejail/mnt/dev/dri directory
mounting /run/firejail/mnt/dev/video0 file
mounting /run/firejail/mnt/dev/video1 file
Process /dev/shm directory
Copying files in the new bin directory
Checking /usr/local/bin/locale
Checking /usr/bin/locale
sbox run: /run/firejail/lib/fcopy /usr/bin/locale /run/firejail/mnt/bin
Checking /usr/local/bin/slack
firejail exec symlink detected
Checking /usr/bin/slack
sbox run: /run/firejail/lib/fcopy /usr/bin/slack /run/firejail/mnt/bin
Mount-bind /run/firejail/mnt/bin on top of /usr/local/bin
Mount-bind /run/firejail/mnt/bin on top of /usr/bin
Mount-bind /run/firejail/mnt/bin on top of /bin
Mount-bind /run/firejail/mnt/bin on top of /usr/local/games
Mount-bind /run/firejail/mnt/bin on top of /usr/local/sbin
Mount-bind /run/firejail/mnt/bin on top of /usr/sbin
Mount-bind /run/firejail/mnt/bin on top of /sbin
2 programs installed in 1.81 ms
blacklist /run/firejail/dbus
Mounting read-only /proc/sys
Remounting /sys directory
Disable /sys/firmware
Disable /sys/hypervisor
Disable /sys/power
Disable /sys/kernel/debug
Disable /sys/kernel/vmcoreinfo
Disable /proc/sys/fs/binfmt_misc
Disable /proc/sys/kernel/core_pattern
Disable /proc/sys/kernel/modprobe
Disable /proc/sysrq-trigger
Disable /proc/sys/vm/panic_on_oom
Disable /proc/irq
Disable /proc/bus
Disable /proc/sched_debug
Disable /proc/timer_list
Disable /proc/kcore
Disable /proc/kallsyms
Disable /usr/lib/modules (requested /lib/modules)
Disable /boot
Disable /run/user/1000/gnupg
Disable /run/user/1000/systemd
Disable /proc/kmsg
Copying files in the new /etc directory:
Copying /etc/alternatives to private /etc
Creating empty /run/firejail/mnt/etc/alternatives directory
sbox run: /run/firejail/lib/fcopy /etc/alternatives /run/firejail/mnt/etc/alternatives
Warning: file /etc/asound.conf not found.
Warning: skipping asound.conf for private /etc
Copying /etc/ca-certificates to private /etc
Creating empty /run/firejail/mnt/etc/ca-certificates directory
sbox run: /run/firejail/lib/fcopy /etc/ca-certificates /run/firejail/mnt/etc/ca-certificates
Warning: file /etc/crypto-policies not found.
Warning: skipping crypto-policies for private /etc
Warning: file /etc/debian_version not found.
Warning: skipping debian_version for private /etc
Warning: file /etc/fedora-release not found.
Warning: skipping fedora-release for private /etc
Copying /etc/fonts to private /etc
Creating empty /run/firejail/mnt/etc/fonts directory
sbox run: /run/firejail/lib/fcopy /etc/fonts /run/firejail/mnt/etc/fonts
Warning fcopy: skipping /etc/fonts/conf.d/70-no-bitmaps.conf, cannot find inode
Warning fcopy: skipping /etc/fonts/conf.d/11-lcdfilter-default.conf, cannot find inode
Warning fcopy: skipping /etc/fonts/conf.d/10-sub-pixel-rgb.conf, cannot find inode
Copying /etc/group to private /etc
sbox run: /run/firejail/lib/fcopy /etc/group /run/firejail/mnt/etc
Copying /etc/ld.so.cache to private /etc
sbox run: /run/firejail/lib/fcopy /etc/ld.so.cache /run/firejail/mnt/etc
Copying /etc/ld.so.conf to private /etc
sbox run: /run/firejail/lib/fcopy /etc/ld.so.conf /run/firejail/mnt/etc
Copying /etc/localtime to private /etc
sbox run: /run/firejail/lib/fcopy /etc/localtime /run/firejail/mnt/etc
Copying /etc/machine-id to private /etc
sbox run: /run/firejail/lib/fcopy /etc/machine-id /run/firejail/mnt/etc
Copying /etc/os-release to private /etc
sbox run: /run/firejail/lib/fcopy /etc/os-release /run/firejail/mnt/etc
Copying /etc/passwd to private /etc
sbox run: /run/firejail/lib/fcopy /etc/passwd /run/firejail/mnt/etc
Warning: file /etc/pki not found.
Warning: skipping pki for private /etc
Copying /etc/pulse to private /etc
Creating empty /run/firejail/mnt/etc/pulse directory
sbox run: /run/firejail/lib/fcopy /etc/pulse /run/firejail/mnt/etc/pulse
Warning: file /etc/redhat-release not found.
Warning: skipping redhat-release for private /etc
Copying /etc/resolv.conf to private /etc
sbox run: /run/firejail/lib/fcopy /etc/resolv.conf /run/firejail/mnt/etc
Copying /etc/ssl to private /etc
Creating empty /run/firejail/mnt/etc/ssl directory
sbox run: /run/firejail/lib/fcopy /etc/ssl /run/firejail/mnt/etc/ssl
Warning: file /etc/system-release not found.
Warning: skipping system-release for private /etc
Warning: file /etc/system-release-cpe not found.
Warning: skipping system-release-cpe for private /etc
Mount-bind /run/firejail/mnt/etc on top of /etc
Private /etc installed in 28.20 ms
Cannot find /usr/etc: No such file or directory
Mount-bind /run/firejail/mnt/usretc on top of /usr/etc
Cannot find /usr/etc: No such file or directory
Private /usr/etc installed in 0.03 ms
Debug 456: new_name #/home/alxjsn/.config/Slack#, whitelist
Debug 571: fname #/home/alxjsn/.config/Slack#, cfg.homedir #/home/alxjsn#
Replaced whitelist path: whitelist /home/alxjsn/.config/Slack
Directory ${DOWNLOADS} resolved as Downloads
Debug 456: new_name #/home/alxjsn/Downloads#, whitelist
Debug 571: fname #/home/alxjsn/Downloads#, cfg.homedir #/home/alxjsn#
Replaced whitelist path: whitelist /home/alxjsn/Downloads
Debug 456: new_name #/home/alxjsn/.XCompose#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.XCompose
	expanded: /home/alxjsn/.XCompose
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.alsaequal.bin#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.alsaequal.bin
	expanded: /home/alxjsn/.alsaequal.bin
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.asoundrc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.asoundrc
	expanded: /home/alxjsn/.asoundrc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.config/ibus#, whitelist
Debug 571: fname #/home/alxjsn/.config/ibus#, cfg.homedir #/home/alxjsn#
Replaced whitelist path: whitelist /home/alxjsn/.config/ibus
Debug 456: new_name #/home/alxjsn/.config/mimeapps.list#, whitelist
Debug 571: fname #/home/alxjsn/.config/mimeapps.list#, cfg.homedir #/home/alxjsn#
Replaced whitelist path: whitelist /home/alxjsn/.config/mimeapps.list
Debug 456: new_name #/home/alxjsn/.config/pkcs11#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/pkcs11
	expanded: /home/alxjsn/.config/pkcs11
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.config/user-dirs.dirs#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/user-dirs.dirs
	expanded: /home/alxjsn/.config/user-dirs.dirs
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.config/user-dirs.locale#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/user-dirs.locale
	expanded: /home/alxjsn/.config/user-dirs.locale
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.drirc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.drirc
	expanded: /home/alxjsn/.drirc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.icons#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.icons
	expanded: /home/alxjsn/.icons
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.local/share/applications#, whitelist
Debug 571: fname #/home/alxjsn/.local/share/applications#, cfg.homedir #/home/alxjsn#
Replaced whitelist path: whitelist /home/alxjsn/.local/share/applications
Debug 456: new_name #/home/alxjsn/.local/share/icons#, whitelist
Debug 571: fname #/home/alxjsn/.local/share/icons#, cfg.homedir #/home/alxjsn#
Replaced whitelist path: whitelist /home/alxjsn/.local/share/icons
Debug 456: new_name #/home/alxjsn/.local/share/mime#, whitelist
Debug 571: fname #/home/alxjsn/.local/share/mime#, cfg.homedir #/home/alxjsn#
Replaced whitelist path: whitelist /home/alxjsn/.local/share/mime
Debug 456: new_name #/home/alxjsn/.mime.types#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.mime.types
	expanded: /home/alxjsn/.mime.types
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.uim.d#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.uim.d
	expanded: /home/alxjsn/.uim.d
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.config/dconf#, whitelist
Debug 571: fname #/home/alxjsn/.config/dconf#, cfg.homedir #/home/alxjsn#
Replaced whitelist path: whitelist /home/alxjsn/.config/dconf
Debug 456: new_name #/home/alxjsn/.cache/fontconfig#, whitelist
Debug 571: fname #/home/alxjsn/.cache/fontconfig#, cfg.homedir #/home/alxjsn#
Replaced whitelist path: whitelist /home/alxjsn/.cache/fontconfig
Debug 456: new_name #/home/alxjsn/.config/fontconfig#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/fontconfig
	expanded: /home/alxjsn/.config/fontconfig
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.fontconfig#, whitelist
Debug 571: fname #/home/alxjsn/.fontconfig#, cfg.homedir #/home/alxjsn#
Replaced whitelist path: whitelist /home/alxjsn/.fontconfig
Debug 456: new_name #/home/alxjsn/.fonts#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.fonts
	expanded: /home/alxjsn/.fonts
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.fonts.conf#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.fonts.conf
	expanded: /home/alxjsn/.fonts.conf
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.fonts.conf.d#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.fonts.conf.d
	expanded: /home/alxjsn/.fonts.conf.d
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.fonts.d#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.fonts.d
	expanded: /home/alxjsn/.fonts.d
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.local/share/fonts#, whitelist
Debug 571: fname #/home/alxjsn/.local/share/fonts#, cfg.homedir #/home/alxjsn#
Replaced whitelist path: whitelist /home/alxjsn/.local/share/fonts
Debug 456: new_name #/home/alxjsn/.pangorc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.pangorc
	expanded: /home/alxjsn/.pangorc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.config/gtk-2.0#, whitelist
Debug 571: fname #/home/alxjsn/.config/gtk-2.0#, cfg.homedir #/home/alxjsn#
Replaced whitelist path: whitelist /home/alxjsn/.config/gtk-2.0
Debug 456: new_name #/home/alxjsn/.config/gtk-3.0#, whitelist
Debug 571: fname #/home/alxjsn/.config/gtk-3.0#, cfg.homedir #/home/alxjsn#
Replaced whitelist path: whitelist /home/alxjsn/.config/gtk-3.0
Debug 456: new_name #/home/alxjsn/.config/gtk-4.0#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/gtk-4.0
	expanded: /home/alxjsn/.config/gtk-4.0
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.config/gtkrc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/gtkrc
	expanded: /home/alxjsn/.config/gtkrc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.config/gtkrc-2.0#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/gtkrc-2.0
	expanded: /home/alxjsn/.config/gtkrc-2.0
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.gnome2#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.gnome2
	expanded: /home/alxjsn/.gnome2
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.gnome2-private#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.gnome2-private
	expanded: /home/alxjsn/.gnome2-private
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.gtk-2.0#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.gtk-2.0
	expanded: /home/alxjsn/.gtk-2.0
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.gtkrc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.gtkrc
	expanded: /home/alxjsn/.gtkrc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.gtkrc-2.0#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.gtkrc-2.0
	expanded: /home/alxjsn/.gtkrc-2.0
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.kde/share/config/gtkrc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/gtkrc
	expanded: /home/alxjsn/.kde/share/config/gtkrc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.kde/share/config/gtkrc-2.0#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/gtkrc-2.0
	expanded: /home/alxjsn/.kde/share/config/gtkrc-2.0
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.kde4/share/config/gtkrc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/gtkrc
	expanded: /home/alxjsn/.kde4/share/config/gtkrc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.kde4/share/config/gtkrc-2.0#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/gtkrc-2.0
	expanded: /home/alxjsn/.kde4/share/config/gtkrc-2.0
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.local/share/themes#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.local/share/themes
	expanded: /home/alxjsn/.local/share/themes
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.themes#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.themes
	expanded: /home/alxjsn/.themes
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.cache/kioexec/krun#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.cache/kioexec/krun
	expanded: /home/alxjsn/.cache/kioexec/krun
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.config/Kvantum#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/Kvantum
	expanded: /home/alxjsn/.config/Kvantum
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.config/Trolltech.conf#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/Trolltech.conf
	expanded: /home/alxjsn/.config/Trolltech.conf
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.config/QtProject.conf#, whitelist
Debug 571: fname #/home/alxjsn/.config/QtProject.conf#, cfg.homedir #/home/alxjsn#
Replaced whitelist path: whitelist /home/alxjsn/.config/QtProject.conf
Debug 456: new_name #/home/alxjsn/.config/kdeglobals#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/kdeglobals
	expanded: /home/alxjsn/.config/kdeglobals
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.config/kio_httprc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/kio_httprc
	expanded: /home/alxjsn/.config/kio_httprc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.config/kioslaverc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/kioslaverc
	expanded: /home/alxjsn/.config/kioslaverc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.config/ksslcablacklist#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/ksslcablacklist
	expanded: /home/alxjsn/.config/ksslcablacklist
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.config/qt5ct#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/qt5ct
	expanded: /home/alxjsn/.config/qt5ct
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.config/qtcurve#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.config/qtcurve
	expanded: /home/alxjsn/.config/qtcurve
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.kde/share/config/kdeglobals#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/kdeglobals
	expanded: /home/alxjsn/.kde/share/config/kdeglobals
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.kde/share/config/kio_httprc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/kio_httprc
	expanded: /home/alxjsn/.kde/share/config/kio_httprc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.kde/share/config/kioslaverc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/kioslaverc
	expanded: /home/alxjsn/.kde/share/config/kioslaverc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.kde/share/config/ksslcablacklist#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/ksslcablacklist
	expanded: /home/alxjsn/.kde/share/config/ksslcablacklist
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.kde/share/config/oxygenrc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/config/oxygenrc
	expanded: /home/alxjsn/.kde/share/config/oxygenrc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.kde/share/icons#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde/share/icons
	expanded: /home/alxjsn/.kde/share/icons
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.kde4/share/config/kdeglobals#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/kdeglobals
	expanded: /home/alxjsn/.kde4/share/config/kdeglobals
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.kde4/share/config/kio_httprc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/kio_httprc
	expanded: /home/alxjsn/.kde4/share/config/kio_httprc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.kde4/share/config/kioslaverc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/kioslaverc
	expanded: /home/alxjsn/.kde4/share/config/kioslaverc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.kde4/share/config/ksslcablacklist#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/ksslcablacklist
	expanded: /home/alxjsn/.kde4/share/config/ksslcablacklist
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.kde4/share/config/oxygenrc#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/config/oxygenrc
	expanded: /home/alxjsn/.kde4/share/config/oxygenrc
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.kde4/share/icons#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.kde4/share/icons
	expanded: /home/alxjsn/.kde4/share/icons
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/home/alxjsn/.local/share/qt5ct#, whitelist
Removed whitelist/nowhitelist path: whitelist ${HOME}/.local/share/qt5ct
	expanded: /home/alxjsn/.local/share/qt5ct
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/var/lib/aspell#, whitelist
Removed whitelist/nowhitelist path: whitelist /var/lib/aspell
	expanded: /var/lib/aspell
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/var/lib/ca-certificates#, whitelist
Removed whitelist/nowhitelist path: whitelist /var/lib/ca-certificates
	expanded: /var/lib/ca-certificates
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/var/lib/dbus#, whitelist
Debug 456: new_name #/var/lib/menu-xdg#, whitelist
Removed whitelist/nowhitelist path: whitelist /var/lib/menu-xdg
	expanded: /var/lib/menu-xdg
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/var/lib/uim#, whitelist
Removed whitelist/nowhitelist path: whitelist /var/lib/uim
	expanded: /var/lib/uim
	real path: (null)
	realpath: No such file or directory
Debug 456: new_name #/var/cache/fontconfig#, whitelist
Debug 456: new_name #/var/tmp#, whitelist
Debug 456: new_name #/var/run#, whitelist
Replaced whitelist path: whitelist /run
Debug 456: new_name #/var/lock#, whitelist
Replaced whitelist path: whitelist /run/lock
Mounting tmpfs on /var directory
Mounting a new /root directory
Mounting a new /home directory
Create a new user directory
Whitelisting /home/alxjsn/.config/Slack
2160 2159 254:0 /home/alxjsn/.config/Slack /home/alxjsn/.config/Slack rw,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2160 fsname=/home/alxjsn/.config/Slack dir=/home/alxjsn/.config/Slack fstype=ext4
Whitelisting /home/alxjsn/Downloads
2161 2159 254:0 /home/alxjsn/Downloads /home/alxjsn/Downloads rw,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2161 fsname=/home/alxjsn/Downloads dir=/home/alxjsn/Downloads fstype=ext4
Whitelisting /home/alxjsn/.config/ibus
2162 2159 254:0 /home/alxjsn/.config/ibus /home/alxjsn/.config/ibus rw,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2162 fsname=/home/alxjsn/.config/ibus dir=/home/alxjsn/.config/ibus fstype=ext4
Whitelisting /home/alxjsn/.config/mimeapps.list
2163 2159 254:0 /home/alxjsn/.config/mimeapps.list /home/alxjsn/.config/mimeapps.list rw,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2163 fsname=/home/alxjsn/.config/mimeapps.list dir=/home/alxjsn/.config/mimeapps.list fstype=ext4
Whitelisting /home/alxjsn/.local/share/applications
2164 2159 254:0 /home/alxjsn/.local/share/applications /home/alxjsn/.local/share/applications rw,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2164 fsname=/home/alxjsn/.local/share/applications dir=/home/alxjsn/.local/share/applications fstype=ext4
Whitelisting /home/alxjsn/.local/share/icons
2165 2159 254:0 /home/alxjsn/.local/share/icons /home/alxjsn/.local/share/icons rw,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2165 fsname=/home/alxjsn/.local/share/icons dir=/home/alxjsn/.local/share/icons fstype=ext4
Whitelisting /home/alxjsn/.local/share/mime
2166 2159 254:0 /home/alxjsn/.local/share/mime /home/alxjsn/.local/share/mime rw,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2166 fsname=/home/alxjsn/.local/share/mime dir=/home/alxjsn/.local/share/mime fstype=ext4
Whitelisting /home/alxjsn/.config/dconf
2167 2159 254:0 /home/alxjsn/.config/dconf /home/alxjsn/.config/dconf rw,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2167 fsname=/home/alxjsn/.config/dconf dir=/home/alxjsn/.config/dconf fstype=ext4
Whitelisting /home/alxjsn/.cache/fontconfig
2168 2159 254:0 /home/alxjsn/.cache/fontconfig /home/alxjsn/.cache/fontconfig rw,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2168 fsname=/home/alxjsn/.cache/fontconfig dir=/home/alxjsn/.cache/fontconfig fstype=ext4
Whitelisting /home/alxjsn/.fontconfig
2169 2159 254:0 /home/alxjsn/.fontconfig /home/alxjsn/.fontconfig rw,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2169 fsname=/home/alxjsn/.fontconfig dir=/home/alxjsn/.fontconfig fstype=ext4
Whitelisting /home/alxjsn/.local/share/fonts
2170 2159 254:0 /home/alxjsn/.local/share/fonts /home/alxjsn/.local/share/fonts rw,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2170 fsname=/home/alxjsn/.local/share/fonts dir=/home/alxjsn/.local/share/fonts fstype=ext4
Whitelisting /home/alxjsn/.config/gtk-2.0
2171 2159 254:0 /home/alxjsn/.config/gtk-2.0 /home/alxjsn/.config/gtk-2.0 rw,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2171 fsname=/home/alxjsn/.config/gtk-2.0 dir=/home/alxjsn/.config/gtk-2.0 fstype=ext4
Whitelisting /home/alxjsn/.config/gtk-3.0
2172 2159 254:0 /home/alxjsn/.config/gtk-3.0 /home/alxjsn/.config/gtk-3.0 rw,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2172 fsname=/home/alxjsn/.config/gtk-3.0 dir=/home/alxjsn/.config/gtk-3.0 fstype=ext4
Whitelisting /home/alxjsn/.config/QtProject.conf
2173 2159 254:0 /home/alxjsn/.config/QtProject.conf /home/alxjsn/.config/QtProject.conf rw,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2173 fsname=/home/alxjsn/.config/QtProject.conf dir=/home/alxjsn/.config/QtProject.conf fstype=ext4
Whitelisting /var/lib/dbus
2174 2155 254:0 /var/lib/dbus /var/lib/dbus ro,nosuid,nodev,noexec,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2174 fsname=/var/lib/dbus dir=/var/lib/dbus fstype=ext4
Whitelisting /var/cache/fontconfig
2175 2155 254:0 /var/cache/fontconfig /var/cache/fontconfig ro,nosuid,nodev,noexec,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2175 fsname=/var/cache/fontconfig dir=/var/cache/fontconfig fstype=ext4
Whitelisting /var/tmp
2176 2155 0:95 / /var/tmp rw,nosuid,nodev,noexec - tmpfs tmpfs rw,inode64
mountid=2176 fsname=/ dir=/var/tmp fstype=tmpfs
Created symbolic link /var/run -> /run
Created symbolic link /var/lock -> /run/lock
Mounting read-only /home/alxjsn/.config/dconf
2179 2167 254:0 /home/alxjsn/.config/dconf /home/alxjsn/.config/dconf ro,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2179 fsname=/home/alxjsn/.config/dconf dir=/home/alxjsn/.config/dconf fstype=ext4
Disable /run/user/1000/systemd
Disable /run/docker.sock (requested /var/run/docker.sock)
Disable /run/screens (requested /var/run/screens)
Mounting read-only /home/alxjsn/.local/share/applications
2183 2164 254:0 /home/alxjsn/.local/share/applications /home/alxjsn/.local/share/applications ro,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2183 fsname=/home/alxjsn/.local/share/applications dir=/home/alxjsn/.local/share/applications fstype=ext4
Mounting read-only /home/alxjsn/.config/mimeapps.list
2184 2163 254:0 /home/alxjsn/.config/mimeapps.list /home/alxjsn/.config/mimeapps.list ro,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2184 fsname=/home/alxjsn/.config/mimeapps.list dir=/home/alxjsn/.config/mimeapps.list fstype=ext4
Mounting read-only /home/alxjsn/.local/share/mime
2185 2166 254:0 /home/alxjsn/.local/share/mime /home/alxjsn/.local/share/mime ro,relatime master:1 - ext4 /dev/mapper/root rw
mountid=2185 fsname=/home/alxjsn/.local/share/mime dir=/home/alxjsn/.local/share/mime fstype=ext4
Disable /tmp/ssh-XXXXXX9YQDfr
Disable /tmp/ssh-XXXXXX2fEvb1
Warning: /sbin directory link was not blacklisted
Disable /usr/local/sbin
Warning: /usr/sbin directory link was not blacklisted
Disable /usr/lib/virtualbox
Disable /usr/lib/virtualbox (requested /usr/lib64/virtualbox)
Warning: /run/user/1000/doc does not exist, skipping...
Disable /proc/config.gz
Disable /run/user/1000/wayland-1.lock
Disable /run/user/1000/pipewire-0.lock
Disable /usr/share/java
Disable /usr/lib/valgrind
Disable /usr/src
Disable /usr/local/src
Disable /usr/include
Disable /usr/local/include
Disable /usr/lib/liblua.so.5.4.3 (requested /usr/lib/liblua.so)
Disable /usr/lib/libluajit-5.1.so.2.0.5 (requested /usr/lib/libluajit-5.1.so.2)
Disable /usr/lib/liblua5.3.so.5.3.6 (requested /usr/lib/liblua.so.5.3)
Disable /usr/lib/liblua5.2.so.5.2.4 (requested /usr/lib/liblua5.2.so)
Disable /usr/lib/liblua5.3.so.5.3.6 (requested /usr/lib/liblua5.3.so)
Disable /usr/lib/liblua5.2.so.5.2.4 (requested /usr/lib/liblua5.2.so.5.2)
Disable /usr/lib/liblua.so.5.4.3 (requested /usr/lib/liblua5.4.so)
Disable /usr/lib/liblua5.2.so.5.2.4 (requested /usr/lib/liblua.so.5.2)
Disable /usr/lib/libluajit-5.1.so.2.0.5 (requested /usr/lib/libluajit-5.1.so)
Disable /usr/lib/liblua.so.5.4.3 (requested /usr/lib/liblua.so.5.4)
Disable /usr/lib/liblua5.3.so.5.3.6
Disable /usr/lib/liblua5.3.so.5.3.6 (requested /usr/lib/liblua.so.5.3.6)
Disable /usr/lib/liblua.so.5.4.3
Disable /usr/lib/liblua5.2.so.5.2.4 (requested /usr/lib/liblua.so.5.2.4)
Disable /usr/lib/liblua5.3.so.5.3.6 (requested /usr/lib/liblua5.3.so.5.3)
Disable /usr/lib/liblua5.2.so.5.2.4
Disable /usr/lib/libluajit-5.1.so.2.0.5
Disable /usr/lib/lua
Disable /usr/lib/liblua.so.5.4.3 (requested /usr/lib64/liblua.so)
Disable /usr/lib/libluajit-5.1.so.2.0.5 (requested /usr/lib64/libluajit-5.1.so.2)
Disable /usr/lib/liblua5.3.so.5.3.6 (requested /usr/lib64/liblua.so.5.3)
Disable /usr/lib/liblua5.2.so.5.2.4 (requested /usr/lib64/liblua5.2.so)
Disable /usr/lib/liblua5.3.so.5.3.6 (requested /usr/lib64/liblua5.3.so)
Disable /usr/lib/liblua5.2.so.5.2.4 (requested /usr/lib64/liblua5.2.so.5.2)
Disable /usr/lib/liblua.so.5.4.3 (requested /usr/lib64/liblua5.4.so)
Disable /usr/lib/liblua5.2.so.5.2.4 (requested /usr/lib64/liblua.so.5.2)
Disable /usr/lib/libluajit-5.1.so.2.0.5 (requested /usr/lib64/libluajit-5.1.so)
Disable /usr/lib/liblua.so.5.4.3 (requested /usr/lib64/liblua.so.5.4)
Disable /usr/lib/liblua5.3.so.5.3.6 (requested /usr/lib64/liblua5.3.so.5.3.6)
Disable /usr/lib/liblua5.3.so.5.3.6 (requested /usr/lib64/liblua.so.5.3.6)
Disable /usr/lib/liblua.so.5.4.3 (requested /usr/lib64/liblua.so.5.4.3)
Disable /usr/lib/liblua5.2.so.5.2.4 (requested /usr/lib64/liblua.so.5.2.4)
Disable /usr/lib/liblua5.3.so.5.3.6 (requested /usr/lib64/liblua5.3.so.5.3)
Disable /usr/lib/liblua5.2.so.5.2.4 (requested /usr/lib64/liblua5.2.so.5.2.4)
Disable /usr/lib/libluajit-5.1.so.2.0.5 (requested /usr/lib64/libluajit-5.1.so.2.0.5)
Disable /usr/lib/lua (requested /usr/lib64/lua)
Disable /usr/share/luajit-2.0.5
Disable /usr/share/lua
Disable /usr/lib/libmozjs-60.so
Disable /usr/lib/libmozjs-78.so
Disable /usr/lib/libmozjs-68.so
Disable /usr/lib/libmozjs-60.so (requested /usr/lib64/libmozjs-60.so)
Disable /usr/lib/libmozjs-78.so (requested /usr/lib64/libmozjs-78.so)
Disable /usr/lib/libmozjs-68.so (requested /usr/lib64/libmozjs-68.so)
Disable /usr/lib/perl5
Disable /usr/lib/perl5 (requested /usr/lib64/perl5)
Disable /usr/share/perl-image-exiftool
Disable /usr/share/perl5
Disable /usr/lib/php
Disable /usr/lib/ruby
Disable /usr/lib/python2.7
Disable /usr/lib/python3.7
Disable /usr/lib/python3.8
Disable /usr/lib/python3.9
Disable /usr/lib/python3.7 (requested /usr/lib64/python3.7)
Disable /usr/lib/python3.8 (requested /usr/lib64/python3.8)
Disable /usr/lib/python3.9 (requested /usr/lib64/python3.9)
Not blacklist /home/alxjsn/.config/Slack
Mounting tmpfs on /home/alxjsn/.cache, check owner: yes
2257 2159 0:109 / /home/alxjsn/.cache rw,nosuid,nodev,noexec,relatime - tmpfs tmpfs rw,mode=755,uid=1000,gid=1000,inode64
mountid=2257 fsname=/ dir=/home/alxjsn/.cache fstype=tmpfs
Disable /sys/fs
Disable /sys/module
Disable /mnt
Disable /run/mount
Disable /run/media
Mounting noexec /run/firejail/mnt/pulse
2263 2087 0:92 /pulse /run/firejail/mnt/pulse rw,nosuid,nodev,noexec - tmpfs tmpfs rw,mode=755,inode64
mountid=2263 fsname=/pulse dir=/run/firejail/mnt/pulse fstype=tmpfs
Creating empty /home/alxjsn/.config/pulse directory
Drop privileges: pid 17, uid 1000, gid 1000, nogroups 0
Mounting /run/firejail/mnt/pulse on /home/alxjsn/.config/pulse
2264 2159 0:92 /pulse /home/alxjsn/.config/pulse rw,nosuid,nodev,noexec - tmpfs tmpfs rw,mode=755,inode64
mountid=2264 fsname=/pulse dir=/home/alxjsn/.config/pulse fstype=tmpfs
Current directory: /home/alxjsn
DISPLAY=:0 parsed as 0
Mounting read-only /run/firejail/mnt/seccomp
2266 2087 0:92 /seccomp /run/firejail/mnt/seccomp ro,nosuid - tmpfs tmpfs rw,mode=755,inode64
mountid=2266 fsname=/seccomp dir=/run/firejail/mnt/seccomp fstype=tmpfs
Seccomp directory:
ls /run/firejail/mnt/seccomp
drwxr-xr-x root     root             120 .
drwxr-xr-x root     root             300 ..
-rw-r--r-- alxjsn   alxjsn           576 seccomp
-rw-r--r-- alxjsn   alxjsn           432 seccomp.32
-rw-r--r-- alxjsn   alxjsn             0 seccomp.postexec
-rw-r--r-- alxjsn   alxjsn             0 seccomp.postexec32
No active seccomp files
Set caps filter 240000
Drop privileges: pid 1, uid 1000, gid 1000, nogroups 1
No supplementary groups
Starting application
LD_PRELOAD=(null)
execvp argument 0: slack
Child process initialized in 141.35 ms
Searching $PATH for slack
trying #/home/alxjsn/.gem/ruby/3.0.0/bin/slack#
trying #/home/alxjsn/bin/guinevere/slack#
trying #/home/alxjsn/bin/slack#
trying #/home/alxjsn/go/bin/slack#
trying #/home/alxjsn/.local/bin/slack#
trying #/home/alxjsn/.npm-global/bin/slack#
trying #/usr/local/bin/slack#
Cannot start application: No such file or directory
monitoring pid 18

Sandbox monitor: waitpid 18 retval 18 status 256

Parent is shutting down, bye...
@rusty-snake
Copy link
Collaborator

The file /usr/bin/slack installed by the Slack AUR package is the following:

#!/bin/sh

exec electron /usr/lib/slack/app.asar "$@"

I found that commenting out the following two lines fixed the issue:

include disable-shell.inc
private-bin locale,slack

Is this slack.local enough?

include allow-bin-sh.inc
private-bin electron,electron[0-9],electron[0-9][0-9],sh

@alxjsn
Copy link
Contributor Author

alxjsn commented Jun 3, 2021

Yes, that local file works for me. Thanks for the help!

@alxjsn
Copy link
Contributor Author

alxjsn commented Jun 9, 2021

@rusty-snake so I realized that I had https://aur.archlinux.org/packages/slack-electron/ installed instead of https://aur.archlinux.org/packages/slack-desktop/

Because my default shell is fish I had to add the following local file to make slack-desktop work in my environment:

noblacklist ${PATH}/fish
private-bin fish

Just wanted to add this as a note. Thanks again.

@matu3ba matu3ba mentioned this issue Oct 7, 2021
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

luarocks matu3ba/firejail
2 participants
@alxjsn @rusty-snake