No Internet connection when starting 'firejail firefox' since firefox 60

Bug #1776175 reported by Siegward Jäkel
276
This bug affects 4 people
Affects Status Importance Assigned to Milestone
firejail (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

With Firefox 59 starting with 'firejail firefox' was O.K.
When starting Firefox 60 with 'firejail firefox' no internet connection is possible. I have to start firefox without firejail.

Content of file ~/.config/firejail/firefox.profile

# Firejail profile for Mozilla Firefox (Iceweasel in Debian)
noblacklist ${HOME}/.mozilla
include /etc/firejail/disable-mgmt.inc
include /etc/firejail/disable-secret.inc
include /etc/firejail/disable-common.inc
include /etc/firejail/disable-devel.inc
caps.drop all
seccomp
protocol unix,inet,inet6,netlink
netfilter
tracelog
noroot
whitelist ${DOWNLOADS}
whitelist ~/Download
whitelist ~/Upload
whitelist ~/.mozilla
whitelist ~/.cache/mozilla/firefox
whitelist ~/dwhelper
whitelist ~/.zotero
whitelist ~/.lastpass
whitelist ~/.vimperatorrc
whitelist ~/.vimperator
whitelist ~/.pentadactylrc
whitelist ~/.pentadactyl
whitelist ~/.keysnail.js
whitelist ~/.config/gnome-mplayer
whitelist ~/.cache/gnome-mplayer/plugin
include /etc/firejail/whitelist-common.inc

ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: firejail 0.9.38.10-0ubuntu0.16.04.1
ProcVersionSignature: Ubuntu 4.4.0-127.153-generic 4.4.128
Uname: Linux 4.4.0-127-generic x86_64
ApportVersion: 2.20.1-0ubuntu2.18
Architecture: amd64
CurrentDesktop: GNOME-Flashback:Unity
Date: Mon Jun 11 10:22:11 2018
Dependencies:
 gcc-6-base 6.0.1-0ubuntu1
 libc6 2.23-0ubuntu10
 libgcc1 1:6.0.1-0ubuntu1
InstallationDate: Installed on 2016-10-08 (610 days ago)
InstallationMedia: Ubuntu 16.04.1 LTS "Xenial Xerus" - Release amd64 (20160719)
SourcePackage: firejail
UpgradeStatus: No upgrade log present (probably fresh install)

CVE References

Revision history for this message
Siegward Jäkel (sj) wrote :
information type: Private Security → Public Security
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in firejail (Ubuntu):
status: New → Confirmed
Revision history for this message
Pjotr12345 (computertip) wrote :

There are two workarounds: install the latest stable Firejail (0.9.54) by downloading its .deb installer from the Firejail website, or use another profile for Firefox:
https://firejail.wordpress.com/support/#profile-fixes

But this should be fixed in the Ubuntu repo's as well.

Revision history for this message
Pjotr12345 (computertip) wrote :

Note that even the Firejail version in Bionic (0.9.52) is affected by this.

Revision history for this message
Pjotr12345 (computertip) wrote :
Changed in firejail (Ubuntu):
assignee: nobody → Pjotr12345 (computertip)
assignee: Pjotr12345 (computertip) → nobody
Revision history for this message
Pjotr12345 (computertip) wrote :
Revision history for this message
Siegward Jäkel (sj) wrote :

It is possible to surf with the attached profile.

Thank you

Revision history for this message
Ubuntu Foundations Team Bug Bot (crichton) wrote :

The attachment "Profile for Firejail 0.9.52, as created by the author of Firejail, in order to fix this for Firefox 60+" seems to be a patch. If it isn't, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.]

tags: added: patch
Revision history for this message
Reiner Herrmann (deki) wrote :

Fixed in 0.9.54-1.

Changed in firejail (Ubuntu):
status: Confirmed → Fix Released
Dave Love (fx-gnu)
tags: added: bionic
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.