google-chrome: no input possible in searchbar and fields

[michaelvandewalle-commits]

Description

Formerly working until Linux-mint-cinnamon-22.2 but not anymore after upgrade to 22.3

Steps to Reproduce

Steps to reproduce the behavior

1. Run in terminal firejail --blacklist=/media/ google-chrome-stable %U
2. Click on 'New tab'
3. Type in the searchbar

4. you can not type there

Expected behavior

Normally you can enter a searchword there.

Actual behavior

you can not enter text in the searchfield

Behavior without a profile

What changed calling LC_ALL=C firejail --noprofile /path/to/program in a
terminal?

This works!

Additional context

Adding --nodbus works

This works: firejail --blacklist=/media/ firefox %U

Environment

• Name/version/arch of the Linux kernel (uname -srm): Linux 6.8.0-90-generic x86_64
• Name/version of the Linux distribution (e.g. "Ubuntu 20.04" or "Arch Linux"): Linux-mint-cinnamon-22.3
• Name/version of the relevant program(s)/package(s) (e.g. "firefox 134.0-1,
  mesa 1:24.3.3-2"): google-chrome-stable 143.0.7499.192
• Version of Firejail (firejail --version): firejail version 0.9.72
• If you use a development version of firejail, also the commit from which it
  was compiled (git rev-parse HEAD): none

Checklist

• I am using firejail 0.9.78 or later
• I am using the full program path (e.g. firejail /usr/bin/vlc instead of firejail vlc; see https://github.com/netblue30/firejail/issues/2877)
• The issues is caused by firejail (i.e. running the program by path (e.g. /usr/bin/vlc) "fixes" it).
• I can reproduce the issue without custom modifications (e.g. globals.local).
• The program has a profile. (If not, request one in https://github.com/netblue30/firejail/issues/1139)
• The profile (and redirect profile if exists) hasn't already been fixed upstream.
• I have performed a short search for similar issues (to avoid opening a duplicate).
  • I'm aware of browser-allow-drm yes/browser-disable-u2f no in firejail.config to allow DRM/U2F in browsers.
• I used --profile=PROFILENAME to set the right profile. (Only relevant for AppImages)

Log

Output of LC_ALL=C firejail --blacklist=/media/ google-chrome-stable %U

firejail --blacklist=/media/ google-chrome-stable %U
Reading profile /etc/firejail/google-chrome-stable.profile
Reading profile /etc/firejail/google-chrome.profile
Reading profile /etc/firejail/chromium-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/disable-xdg.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-run-common.inc
Reading profile /etc/firejail/whitelist-runuser-common.inc
Reading profile /etc/firejail/whitelist-usr-share-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Warning: networking feature is disabled in Firejail configuration file
Parent pid 34766, child pid 34767
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Warning: cleaning all supplementary groups
Warning: cleaning all supplementary groups
Warning: cleaning all supplementary groups
Warning: cleaning all supplementary groups
Warning: cleaning all supplementary groups
Child process initialized in 172.64 ms
[6:30:0114/143935.171184:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Failed to connect to socket /run/firejail/mnt/dbus/system: Permission denied
[6:30:0114/143935.441463:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Failed to connect to socket /run/firejail/mnt/dbus/system: Permission denied
[6:30:0114/143935.441500:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Failed to connect to socket /run/firejail/mnt/dbus/system: Permission denied

(google-chrome-stable:6): dbind-WARNING **: 14:39:35.491: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/1000/at-spi/bus_0: No such file or directory
[6:30:0114/143935.545062:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Failed to connect to socket /run/firejail/mnt/dbus/system: Permission denied
[6:30:0114/143935.545463:ERROR:dbus/bus.cc:406] Failed to connect to the bus: Failed to connect to socket /run/firejail/mnt/dbus/system: Permission denied
[6:6:0114/143935.545881:ERROR:dbus/object_proxy.cc:573] Failed to call method: org.freedesktop.systemd1.Manager.StartTransientUnit: object_path= /org/freedesktop/systemd1: org.freedesktop.DBus.Error.InvalidArgs: Process 6 is a kernel thread, refusing.
[6:6:0114/143935.548713:ERROR:dbus/object_proxy.cc:573] Failed to call method: org.freedesktop.DBus.Properties.GetAll: object_path= /org/freedesktop/UPower/devices/DisplayDevice: unknown error type: 

(google-chrome-stable:6): IBUS-WARNING **: 14:39:38.995: Unable to connect to ibus: Could not connect: No such file or directory
[6:6:0114/143939.275037:ERROR:chrome/browser/ui/startup/startup_browser_creator_impl.cc:171] No browser window found for startup.
[6:6:0114/143939.412170:ERROR:chrome/browser/ui/views/user_education/impl/browser_user_education_interface_impl.cc:154] Attempting to show IPH IPH_TabSearch before browser initialization complete; IPH will not be shown.
[6:6:0114/143939.414924:ERROR:chrome/browser/ui/views/user_education/impl/browser_user_education_interface_impl.cc:154] Attempting to show IPH IPH_TabSearch before browser initialization complete; IPH will not be shown.
[6:6:0114/143939.419492:ERROR:chrome/browser/ui/views/user_education/impl/browser_user_education_interface_impl.cc:154] Attempting to show IPH IPH_TabSearch before browser initialization complete; IPH will not be shown.
[6:6:0114/143939.423328:ERROR:chrome/browser/ui/views/user_education/impl/browser_user_education_interface_impl.cc:154] Attempting to show IPH IPH_TabSearch before browser initialization complete; IPH will not be shown.
[6:6:0114/143939.427090:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type.
[6:6:0114/143939.427109:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type.
[6:6:0114/143939.427139:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type.
[6:6:0114/143939.436152:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type.
[6:6:0114/143939.436164:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type.
Created TensorFlow Lite XNNPACK delegate for CPU.
[6:6:0114/143939.544345:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type.
[6:6:0114/143939.544369:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type.
[6:6:0114/143939.544372:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type.
[6:6:0114/143939.544412:ERROR:chrome/browser/ui/webui/ntp/new_tab_ui.cc:54] Requested load of chrome://newtab/ for incorrect profile type.
Fontconfig error: Cannot load default config file: File not found
[6:32:0114/143939.635778:ERROR:google_apis/gcm/engine/registration_request.cc:292] Registration response error message: DEPRECATED_ENDPOINT
[6:6:0114/143957.267629:ERROR:ui/gfx/x/atom_cache.cc:232] Add chromium/from-privileged to kAtomsToCache
[6:32:0114/144008.498889:ERROR:google_apis/gcm/engine/registration_request.cc:292] Registration response error message: QUOTA_EXCEEDED

Output of LC_ALL=C firejail --debug --blacklist=/media/ google-chrome-stable %U

debug-GCHR.txt

[kmk3]

firejail version 0.9.72

Note that we do not maintain that version of firejail:

• https://github.com/netblue30/firejail/blob/master/SECURITY.md

Versions other than the latest usually have outdated profiles and may contain
bugs and security vulnerabilities that were fixed in later versions.

See also:

• https://github.com/netblue30/firejail#installing

What happens with the latest released version?

[michaelvandewalle-commits]

I uninstalled version 0.9.72 + profiles.
Installed 0.9.78 but the old profiles came back.
Result = same problem.

Note: also with chromium the problem is the same as google-chrome, because the same profiles are used.
Therefore, the profiles or Google-Chrome and Chromium must be updated.

[rusty-snake]

Likely a ibus/fcitx issue.

[michaelvandewalle-commits]

It works not with cinnamon-standard, but IT WORKS under WAYLAND !