Hi Vincent,

On Thu, May 17, 2018 at 09:32:20AM +0200, Vincent Lefevre wrote:
> With the previous profiles, I could use the following firefox script:
> 
> exec /usr/bin/firejail --name=firefox firefox-esr "$@"
> 
> and everything was fine. After starting firefox, I could open a
> new URL with it and didn't get any error. For instance:
> 
[...]
> 
> With the new profile, the URL is still opened, but firejail now
> terminates with an exit status 1. For instance:
> 
> cventin:~> firefox http://localhost/
> zsh: exit 1     firefox http://localhost/
> cventin:~[1]>

I'm currently not able to reproduce it.

% cat `which firefox`
#!/bin/sh
exec /usr/bin/firejail --name=firefox firefox-esr "$@"
% firefox --private http://debian.org
Reading profile /etc/firejail/firefox-esr.profile
Reading profile /etc/firejail/firefox.profile
Reading profile /etc/firejail/firefox-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 28995, child pid 28996
Warning: An abstract unix socket for session D-BUS might still be
available. Use --net or remove unix from --protocol set.
Post-exec seccomp protector enabled
Warning fseccomp: syscall "ni_syscall" not available on this platform
Warning fseccomp: syscall "umount" not available on this platform
Seccomp list in:
@clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice,
check list: @default-keep, prelist:
adjtimex,clock_adjtime,clock_settime,settimeofday,modify_ldt,lookup_dcookie,perf_event_open,process_vm_writev,delete_module,finit_module,init_module,_sysctl,afs_syscall,create_module,get_kernel_syms,getpmsg,putpmsg,query_module,security,sysfs,tuxcall,uselib,ustat,vserver,ioperm,iopl,kexec_load,kexec_file_load,reboot,set_mempolicy,migrate_pages,move_pages,mbind,swapon,swapoff,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount2,userfaultfd,vhangup,vmsplice,
Child process initialized in 110.13 ms
[...]
Parent is shutting down, bye...
% echo $?
0
%

I assume you are also using the current Firefox ESR version 52 (52.8.0esr-1)?
Are you using any addons or so that could influence the exit code?

Regards,
   Reiner

Attachment: signature.asc
Description: PGP signature

Reply via email to