Wait it’s not fixed, I did not upgrade after the install, and now back to apparmor or permissions.
Flatpak will work using “sudo flatpak install” not Ideal…
Correct me if I’m wrong but, Flatpaks are being installed system-wide, and for many commands there is no need to use sudo (e.g. flatpak install, flatpak remove), but this is only “IF” the user is in the wheel group, i.e. has admin privileges.
Would the user not be in the wheel group, a wheel user’s authentication is required.
Note that there are certain flatpak commands (.e.g flatpak override), probably considered to be able to affect the system in undesired ways, that require running with sudo.
Firejail any browser and Internet is broke.
Reading profile /etc/firejail/firefox-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-proc.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-run-common.inc
Reading profile /etc/firejail/whitelist-runuser-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Warning: networking feature is disabled in Firejail configuration file
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Parent pid 13957, child pid 13980
Warning: cannot find /var/run/utmp
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Warning: NVIDIA card detected, nogroups command ignored
Warning: cleaning all supplementary groups
Warning: NVIDIA card detected, nogroups command ignored
Warning: cleaning all supplementary groups
Warning: NVIDIA card detected, nogroups command ignored
Warning: cleaning all supplementary groups
Warning: NVIDIA card detected, nogroups command ignored
Warning: cleaning all supplementary groups
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Warning: NVIDIA card detected, nogroups command ignored
Warning: NVIDIA card detected, nogroups command ignored
Warning: cleaning all supplementary groups
Warning: Replacing profile instead of stacking it. It is a legacy behavior that can result in relaxation of the protection. It is here as a temporary measure to unbreak the software that has been broken by switching to the stacking behavior.
Child process initialized in 270.49 ms
Gtk-Message: 09:06:52.058: Failed to load module "colorreload-gtk-module"
ATTENTION: default value of option mesa_glthread overridden by environment.
sudo aa-status | grep firejail-default
firejail-default
Anything else is fine eg:
sudo aa-status | grep surfshark
surfshark
/app/opt/Surfshark/surfshark (3300) bwrap//&unpriv_bwrap
/app/opt/Surfshark/surfshark (3318) bwrap//&unpriv_bwrap
/app/opt/Surfshark/surfshark (3335) bwrap//&unpriv_bwrap
/app/opt/Surfshark/surfshark (3413) bwrap//&unpriv_bwrap
/app/opt/Surfshark/surfshark (3464) bwrap//&unpriv_bwrap
/app/opt/Surfshark/surfshark (3475) bwrap//&unpriv_bwrap
I just received this:
Georgia Garcia 22 hours ago
Changed in apparmor (Ubuntu):
assignee: nobody → Georgia Garcia (georgiag)
status: New → In Progress
To make firejail work i needed to remove the firejail-default profile.
sudo ln -s /etc/apparmor.d/firejail-default /etc/apparmor.d/disable/
[sudo] password for me:
Don’t forget to reload apparmor after that change.
