Package: xpra
Version: 2.4.3+dfsg1-1
Severity: important

Dear Maintainer,

I tried to run firefox-esr sandboxed using firejail.
I executed the following command:

firejail --x11=xpra firefox-esr

Firefox starts but when i close the window I end in a blank screen with a
blinking cursor. (Cant write anything)
Im forced to restart my system with ctrl-alt-delete.

I also attach you the output I got with "&>"




-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages xpra depends on:
ii  adduser                   3.118
ii  init-system-helpers       1.56+nmu1
ii  libavcodec58              7:4.1.1-1
ii  libavformat58             7:4.1.1-1
ii  libavutil56               7:4.1.1-1
ii  libc6                     2.28-10
ii  libglib2.0-0              2.58.3-1
ii  libgtk2.0-0               2.24.32-3
ii  libpam0g                  1.3.1-5
ii  libswscale5               7:4.1.1-1
ii  libsystemd0               241-3
ii  libturbojpeg0             1:1.5.2-2+b1
ii  libvpx5                   1.7.0-3
ii  libwebp6                  0.6.1-2
ii  libx11-6                  2:1.6.7-1
ii  libx264-155               2:0.155.2917+git0a84d98-2
ii  libx265-165               2.9-4
ii  libxcomposite1            1:0.4.4-2
ii  libxdamage1               1:1.1.4-3+b3
ii  libxext6                  2:1.3.3-1+b2
ii  libxfixes3                1:5.0.3-1
ii  libxi6                    2:1.7.9-1
ii  libxkbfile1               1:1.0.9-2+b11
ii  libxrandr2                2:1.5.1-1
ii  libxtst6                  2:1.2.3-1
ii  python                    2.7.16-1
ii  python-gi-cairo           3.30.4-1
ii  python-gtk2               2.24.0-5.1+b1
ii  python-rencode            1.0.5-1+b2
ii  x11-xserver-utils         7.7+8
ii  xserver-xorg-input-void   1:1.4.1-1+b2
ii  xserver-xorg-video-dummy  1:0.3.8-1+b1

Versions of packages xpra recommends:
ii  keyboard-configuration  1.191
ii  openssh-client          1:7.9p1-10
ii  python-dbus             1.2.8-3
ii  python-gtkglext1        1.1.0-9.1
ii  python-lz4              1.1.0+dfsg-1
ii  python-lzo              1.12-2
ii  python-paramiko         2.4.2-0.1
ii  python-pil              5.4.1-2
ii  python-uritools         2.2.0-1
ii  ssh-askpass             1:1.2.4.1-10

Versions of packages xpra suggests:
pn  cups-client                <none>
pn  cups-common                <none>
pn  cups-filters               <none>
pn  cups-pdf                   <none>
ii  gstreamer1.0-plugins-bad   1.14.4-1+b1
ii  gstreamer1.0-plugins-base  1.14.4-1
ii  gstreamer1.0-plugins-good  1.14.4-1
ii  gstreamer1.0-plugins-ugly  1.14.4-1
pn  openssh-server             <none>
ii  pulseaudio                 12.2-4
ii  pulseaudio-utils           12.2-4
pn  python-avahi               <none>
pn  python-cups                <none>
pn  python-gst-1.0             <none>
ii  python-netifaces           0.10.4-1+b1
pn  python-opencv              <none>
pn  python-pyopencl            <none>
pn  python-uinput              <none>
ii  python-yaml                3.13-2
pn  v4l2loopback-dkms          <none>
2019-05-12 11:33:32,790 cannot access python uinput module:
2019-05-12 11:33:32,790  No module named uinput

X.Org X Server 1.20.3
X Protocol Version 11, Revision 0
Build Operating System: Linux 4.9.0-8-amd64 x86_64 Debian
Current Operating System: Linux Laptop 4.19.0-4-amd64 #1 SMP Debian 4.19.28-2 
(2019-03-15) x86_64
Kernel command line: BOOT_IMAGE=/vmlinuz-4.19.0-4-amd64 
root=/dev/mapper/Laptop--vg-root ro quiet splash intel_iommu=on
Build Date: 25 October 2018  06:15:23PM
xorg-server 2:1.20.3-1 (https://www.debian.org/support) 
Current version of pixman: 0.36.0
        Before reporting problems, check http://wiki.x.org
        to make sure that you have the latest version.
Markers: (--) probed, (**) from config file, (==) default setting,
        (++) from command line, (!!) notice, (II) informational,
        (WW) warning, (EE) error, (NI) not implemented, (??) unknown.
(++) Log file: "/run/user/1000/xpra/Xorg.:367.log", Time: Sun May 12 11:33:32 
2019
(++) Using config file: "/etc/xpra/xorg.conf"
(==) Using system config directory "/usr/share/X11/xorg.conf.d"
2019-05-12 11:33:35,801 created unix domain socket: 
/run/user/1000/xpra/Laptop-367
2019-05-12 11:33:35,801 cannot create group socket '/run/xpra/Laptop-367'
2019-05-12 11:33:35,801  [Errno 13] Permission denied
2019-05-12 11:33:35,934 pointer device emulation using XTest
2019-05-12 11:33:36,856  OpenGL is supported on this display
2019-05-12 11:33:36,881 html server unavailable, cannot find websockify module
2019-05-12 11:33:36,982 D-Bus notification forwarding is available
2019-05-12 11:33:37,191 Warning: webcam forwarding is disabled
2019-05-12 11:33:37,191  the virtual video directory 
'/sys/devices/virtual/video4linux' was not found
2019-05-12 11:33:37,191  make sure that the 'v4l2loopback' kernel module is 
installed and loaded
2019-05-12 11:33:37,191 found 0 virtual video devices for webcam forwarding
2019-05-12 11:33:37,451 Warning: failed to load the mdns publisher
2019-05-12 11:33:37,451  No module named avahi
2019-05-12 11:33:37,452  either fix your installation or use the 'mdns=no' 
option
2019-05-12 11:33:37,452 xpra X11 version 2.4.3-r21350M 64-bit
2019-05-12 11:33:37,453  uid=1000 (gpdsbe), gid=1000 (gpdsbe)
2019-05-12 11:33:37,453  running with pid 16733 on Linux Debian testing buster
2019-05-12 11:33:37,453  connected to X11 display :367 with 24 bit colors
2019-05-12 11:33:37,548 xpra is ready.
2019-05-12 11:33:37,562 7.5GB of system memory
Xpra server pid 16733, xpra client pid 17056, jail 17057

*** Attaching to xpra display 367 ***

Reading profile /etc/firejail/firefox-esr.profile
Reading profile /etc/firejail/firefox.profile
Reading profile /etc/firejail/firefox-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Warning: networking feature is disabled in Firejail configuration file
Parent pid 17057, child pid 17059
Warning: An abstract unix socket for session D-BUS might still be available. 
Use --net or remove unix from --protocol set.
Post-exec seccomp protector enabled
Seccomp list in: 
@clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice,
 check list: @default-keep, prelist: 
adjtimex,clock_adjtime,clock_settime,settimeofday,modify_ldt,lookup_dcookie,perf_event_open,process_vm_writev,delete_module,finit_module,init_module,_sysctl,afs_syscall,create_module,get_kernel_syms,getpmsg,putpmsg,query_module,security,sysfs,tuxcall,uselib,ustat,vserver,ioperm,iopl,kexec_load,kexec_file_load,reboot,set_mempolicy,migrate_pages,move_pages,mbind,swapon,swapoff,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount2,userfaultfd,vhangup,vmsplice,
]0;firejail firefox-esr Child process initialized in 73.81 ms
2019-05-12 11:33:38,775 Xpra gtk2 client version 2.4.3-r21350M 64-bit
2019-05-12 11:33:38,776  running on Linux Debian testing buster
2019-05-12 11:33:38,776  window manager is 'Xfwm4'
2019-05-12 11:33:38,789 Warning: failed to import opencv:
2019-05-12 11:33:38,789  No module named cv2
2019-05-12 11:33:38,789  webcam forwarding is disabled
2019-05-12 11:33:39,505 GStreamer version 1.14.4 for Python 2.7.16 64-bit
2019-05-12 11:33:39,594 No OpenGL_accelerate module loaded: No module named 
OpenGL_accelerate
2019-05-12 11:33:39,716 Warning: vendor 'Intel Open Source Technology Center' 
is greylisted,
2019-05-12 11:33:39,716  you may want to turn off OpenGL if you encounter bugs
2019-05-12 11:33:39,760 OpenGL enabled with Mesa DRI Intel(R) HD Graphics 
(Whiskey Lake 3x8 GT2)
2019-05-12 11:33:39,814  keyboard settings: rules=evdev, model=pc105, 
layout=us,gr
2019-05-12 11:33:39,816  desktop size is 1920x1080 with 1 screen:
2019-05-12 11:33:39,816   :0.0 (508x285 mm - DPI: 96x96) workarea: 1920x1054
2019-05-12 11:33:39,816     monitor 1 (309x174 mm - DPI: 157x157)
2019-05-12 11:33:40,126 New unix-domain connection received on 
/run/user/1000/xpra/Laptop-367
2019-05-12 11:33:40,128 Handshake complete; enabling connection
2019-05-12 11:33:40,140  mmap is enabled using 256MB area in 
/run/user/1000/xpra/xpra.khdWF4.mmap
2019-05-12 11:33:40,141 Python/Gtk2 Linux Debian testing buster x11 client 
version 2.4.3-r21350 64-bit
2019-05-12 11:33:40,141  connected from 'Laptop' as 'gpdsbe' - 'Georgios'
2019-05-12 11:33:40,225 setting key repeat rate from client: 500ms delay / 50ms 
interval
2019-05-12 11:33:40,227 setting keymap: rules=evdev, model=pc105, layout=us,gr
The XKEYBOARD keymap compiler (xkbcomp) reports:
> Warning:          Symbol map for key <KPDL> redefined
>                   Using last definition for conflicting fields
Errors from xkbcomp are not fatal to the X server
2019-05-12 11:33:40,254 setting keyboard layout to 'us,gr'
The XKEYBOARD keymap compiler (xkbcomp) reports:
> Warning:          Symbol map for key <KPDL> redefined
>                   Using last definition for conflicting fields
Errors from xkbcomp are not fatal to the X server
2019-05-12 11:33:40,282 Warning: keymapping changed:
2019-05-12 11:33:40,282  keycode 108 points to 2 modifiers: mod1, mod5
2019-05-12 11:33:40,282  from definition: ISO_Next_Group, ISO_Level3_Shift, 
Alt_R
2019-05-12 11:33:40,282  mod1: Alt_R
2019-05-12 11:33:40,282  mod5: ISO_Level3_Shift
2019-05-12 11:33:40,282  keeping: Alt_R for mod1
2019-05-12 11:33:40,291  client root window size is 1920x1080 with 1 display:
2019-05-12 11:33:40,291   :0.0 (508x285 mm - DPI: 96x96) workarea: 1920x1054
2019-05-12 11:33:40,292     monitor 1 (309x174 mm - DPI: 157x157)
2019-05-12 11:33:40,330 server virtual display now set to 1920x1080
2019-05-12 11:33:40,344 enabled fast mmap transfers using 256MB shared memory 
area
2019-05-12 11:33:40,344 enabled remote logging
2019-05-12 11:33:40,345 Xpra X11 server version 2.4.3-r21350 64-bit
2019-05-12 11:33:40,345  running on Linux Debian testing buster
2019-05-12 11:33:40,348 Attached to :367
2019-05-12 11:33:40,348  (press Control-C to detach)

2019-05-12 11:33:40,351 client @01.569 Xpra X11 server version 2.4.3-r21350 
64-bit
2019-05-12 11:33:40,352 client @01.569  running on Linux Debian testing buster
2019-05-12 11:33:40,353 client @01.572 Attached to :367
2019-05-12 11:33:40,353 client @01.572  (press Control-C to detach)
2019-05-12 11:33:40,366 DPI set to 23 x 25 (wanted 90 x 90)
2019-05-12 11:33:40,367  you may experience scaling problems, such as huge or 
small fonts, etc
2019-05-12 11:33:40,367  to fix this issue, try the dpi switch, or use a 
patched Xorg dummy driver
2019-05-12 11:33:40,451 server does not support xi input devices
2019-05-12 11:33:40,452 client @01.675 server does not support xi input devices
2019-05-12 11:33:40,452  server uses: xtest
2019-05-12 11:33:40,452 client @01.675  server uses: xtest
2019-05-12 11:33:40,842 New unix-domain connection received on 
/run/user/1000/xpra/Laptop-367
[Parent 9, Gecko_IOThread] WARNING: pipe error (48): Connection reset by peer: 
file 
/build/firefox-esr-eclpcW/firefox-esr-60.6.3esr/ipc/chromium/src/chrome/common/ipc_channel_posix.cc,
 line 342
[Parent 9, Gecko_IOThread] WARNING: pipe error (50): Connection reset by peer: 
file 
/build/firefox-esr-eclpcW/firefox-esr-60.6.3esr/ipc/chromium/src/chrome/common/ipc_channel_posix.cc,
 line 342

Parent is shutting down, bye...
2019-05-12 11:33:50,198 New unix-domain connection received on 
/run/user/1000/xpra/Laptop-367
2019-05-12 11:33:50,201 Handshake complete; enabling connection
2019-05-12 11:33:50,202 Disconnecting client Protocol(unix-domain 
socket:/run/user/1000/xpra/Laptop-367):
2019-05-12 11:33:50,203  new client (new connection from the same uuid)
2019-05-12 11:33:50,204 server requested disconnect:
2019-05-12 11:33:50,205  new client (new connection from the same uuid)
2019-05-12 11:33:50,208 Error: printing disabled:
2019-05-12 11:33:50,209  No module named cups
2019-05-12 11:33:50,210 xpra client 1 disconnected.
2019-05-12 11:33:50,212 Python2/GObject client version 2.4.3-r21350 64-bit
2019-05-12 11:33:50,212  connected from 'Laptop' as 'gpdsbe' - 'Georgios'
2019-05-12 11:33:50,213 Shutting down in response to client request
2019-05-12 11:33:50,214 Disconnecting client Protocol(unix-domain 
socket:/run/user/1000/xpra/Laptop-367):
2019-05-12 11:33:50,214  server shutdown
server requested disconnect:
 server shutdown
2019-05-12 11:33:50,215 xpra client 2 disconnected.
Error: printing disabled:
 No module named cups
2019-05-12 11:33:50,599 New unix-domain connection received on 
/run/user/1000/xpra/Laptop-367
2019-05-12 11:33:51,222 killing xvfb with pid 16789
2019-05-12 11:33:51,223 removing socket /run/user/1000/xpra/Laptop-367
(II) Server terminated successfully (0). Closing log file.
xpra at :367 has exited.

Reply via email to