Public bug reported:

In 26.04 LTS when launching firefox installed from a deb, I get the
following errors in the terminal:

  [1398986] Sandbox: CanCreateUserNamespace() unshare(CLONE_NEWPID):
EPERM

It seems to arise because the default firefox profile includes with the
apparmor package there is a bug in the executable match:

/{usr/lib/firefox{,-esr,-beta,-devedition,-nightly},opt/firefox}/firefox{,-esr,-bin}
flags=(unconfined) {

As per https://askubuntu.com/a/1566883/286552 this may be due to the
nested brackets. I've confirmed it can be addressed by simplifying (and
dropping the opt piece) the line to:

  /usr/lib/firefox{,-esr,-beta,-devedition,-nightly}/firefox{,-esr,-bin}
flags=(unconfined) {

If indeed the issue is the nested brackets, I think the fix might be to
make it something like

/{usr/lib,opt}/firefox{,-esr,-beta,-devedition,-nightly}/firefox{,-esr,-bin}
flags=(unconfined) {

** Affects: apparmor (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2166706

Title:
  Default firefox profile broken in 26.04 LTS, userns disabled

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2166706/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to