Welcome!
Important information
-- Spectre and Meltdown vulnerabilities
-- Change in MX sources

News
-- MX Linux on social media: here
-- Mepis support still here

Current releases
-- MX-17.1 Final release info here
-- antiX-17 release info here

New users
-- Please read this first, and don't forget to add system and hardware information to posts!
-- Here are the Forum Rules

MEPIS 12/MX 14 Community Repo: The Firejail Thread

News about updates on package status for CR packages compiled for MEPIS 12.0
Message
Author
User avatar
Kruppt
Posts: 68
Joined: Tue Jul 29, 2008 11:22 am

Re: MEPIS 12/MX 14 Community Repo: The Firejail Thread

#21 Post by Kruppt » Wed Dec 28, 2016 9:00 pm

Execute below command in user term.
firejail firefox -profilemanager
Create another fresh profile and select it.
If you have been running it with a previously created profile in which you have several addons installed etc.
it may be that one of the addons is causing you problems.

User avatar
linexer2016
Forum Regular
Forum Regular
Posts: 308
Joined: Thu Dec 15, 2016 9:15 pm

Re: MEPIS 12/MX 14 Community Repo: The Firejail Thread

#22 Post by linexer2016 » Wed Dec 28, 2016 9:21 pm

Thanks for the suggestion Kruppt. I will try it when I finish this current firefox session. I'd about given up on firejail so I hope your suggestion works. I will keep you posted.

User avatar
linexer2016
Forum Regular
Forum Regular
Posts: 308
Joined: Thu Dec 15, 2016 9:15 pm

Re: MEPIS 12/MX 14 Community Repo: The Firejail Thread

#23 Post by linexer2016 » Wed Dec 28, 2016 10:54 pm

Hello again Kruppt,
Whilst your suggestion didn't appear to fix the problem, you put me to thinking about how the standard repo installed firefox might have picked up some profile and/or other corruptions. So, having backed up my bookmarks etc (which I found I didn't need upon reinstallation), I went into Synaptic and selected firefox reinstallation. Once this was done, I run firefox under the firetools app and checked "Tools" and found to my delight :happy: :happy: :happy: that the browser is now correctly listed as being run under firejail. Hopefully this discourse will be of value to anyone else who has had similar problems that perhaps turned them away from firejails. Thanks to everyone who contributed to the thread too.

skidoo
Forum Regular
Forum Regular
Posts: 850
Joined: Tue Sep 22, 2015 6:56 pm

Re: MEPIS 12/MX 14 Community Repo: The Firejail Thread

#24 Post by skidoo » Fri Jan 06, 2017 4:36 am

4Jan2017 "firejail local root exploit"
http://seclists.org/oss-sec/2017/q1/21
github repo reputedly already contains a branch with a fix in place.
FWIW, the commentary (re:designflaw/race) suggests other forthcoming patches may be necessary.

User avatar
linexer2016
Forum Regular
Forum Regular
Posts: 308
Joined: Thu Dec 15, 2016 9:15 pm

Re: MEPIS 12/MX 14 Community Repo: The Firejail Thread

#25 Post by linexer2016 » Fri Jan 06, 2017 5:38 am

Thanks for this heads up skidoo. So, it seems that the doctor (firejail) itself has caught a disease. I will be uninstalling firejail pronto then. I have to say, I used it ever so lightly because it had less of an intuitive operation than well known Windows sandbox programs and I never really was certain if the sandbox was working correctly. Now with this security announcement, I see little reason to keep it. Thanks again for the update.

skidoo
Forum Regular
Forum Regular
Posts: 850
Joined: Tue Sep 22, 2015 6:56 pm

Re: MEPIS 12/MX 14 Community Repo: The Firejail Thread

#26 Post by skidoo » Fri Jan 06, 2017 2:07 pm

linexer2016, my reaction to the news is/was more positive. I regard it as a fine example of "opensource in motion" ~~ study, find, fix, improve.

User avatar
linexer2016
Forum Regular
Forum Regular
Posts: 308
Joined: Thu Dec 15, 2016 9:15 pm

Re: MEPIS 12/MX 14 Community Repo: The Firejail Thread

#27 Post by linexer2016 » Sat Jan 07, 2017 4:02 pm

Yes indeed skidoo. That said, and as I mentioned, the benefits/pertinence of such a sandbox program in Linux at this point are probably not sufficient for me to continue on with FJ. Maybe once FJ matures a little more it will be worth another look, however, it really would benefit IMO by some more overt detailing of what's happening when one uses it. Cheers.

User avatar
Stevo
Forum Veteran
Forum Veteran
Posts: 16174
Joined: Fri Dec 15, 2006 8:07 pm

Re: MEPIS 12/MX 14 Community Repo: The Firejail Thread

#28 Post by Stevo » Sat Jan 07, 2017 5:54 pm

I'll build today's Sid version for the test repo; that looks to try and fix those problems:
firejail (0.9.44.4-1) unstable; urgency=high

* New upstream release.
- Security fixes for: CVE-2017-5180, CVE-2017-5206, CVE-2017-5207
(Closes: #850528, #850558)
* Drop patches applied upstream.

-- Reiner Herrmann <reiner@reiner-h.de> Sat, 07 Jan 2017 20:24:40 +0100

firejail (0.9.44.2-3) unstable; urgency=high

* Add followup fix for CVE-2017-5180 (Closes: #850160).

-- Reiner Herrmann <reiner@reiner-h.de> Fri, 06 Jan 2017 13:44:25 +0100

firejail (0.9.44.2-2) unstable; urgency=high

* Add upstream fix for CVE-2017-5180 (Closes: #850160).

-- Reiner Herrmann <reiner@reiner-h.de> Wed, 04 Jan 2017 23:56:30 +0100

Post Reply

Return to “Package Status - 12.0 Beta”