Firefox snap permission denied
Hi, I've been struggling with this for months and can't find an easy solution or a good explanation. I'm running Ubuntu 22.04 pretty basic, I don't have many custom repositories enabled or anything, just a few additional packages like slack, Teams or Chrome. Ubuntu switched Firefox to snaps as well, and I can't get internet access with it. The error message is:
--- May 12 12:16:20 nuc kernel: [12948.381392] audit: type=1400 audit(1683886580.562:131): apparmor="DENIED" operation="open" profile="snap.firefox.firefox" name="/etc/fstab" pid=7731 comm="firefox" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 May 12 12:15:43 nuc rtkit-daemon[1030]: message repeated 3 times: [ Supervising 10 threads of 4 processes of 1 users.] May 12 12:16:20 nuc dbus-daemon[790]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.175' (uid=1000 pid=7731 comm="/snap/firefox/2645/usr/lib/firefox/firefox " label="snap.firefox.firefox (enforce)") ---
Simply stopping (and aa-teardown) doesn't work at all, Firefox doesn't even start without apparmor running. I'm not an expert with apparmor, but I wanted to set in complain mode instead enforce, but I'm struggling with that, too. I didn't touch the /etc/hosts file, the error message is a little different on another Ubuntu 22.04 computer I use, there it complains about permission denied for the resolve.conf. So I'm asking the community, how do you deal with this? Searching the web gives me all kinds of ideas, but none of them work. Could anyone help me out here?
Thanks!
Svi odgovori (5)
the Firefox Snap version has its limitation when it comes to local file access, but you should be able to access webpages. You can check the connection settings.
- Settings -> General -> Network: Connection -> Settings
If you do not need to use a proxy to connect to internet, select "No Proxy" if "Use the system proxy settings" or one of the others do not work properly.
See "Firefox connection settings":
- https://support.mozilla.org/en-US/kb/websites-dont-load-troubleshoot-and-fix-errors
- https://support.mozilla.org/en-US/kb/firefox-cant-load-websites-other-browsers-can
- https://support.mozilla.org/en-US/kb/firefox-and-other-browsers-cant-load-websites
You can look at Firefox from the official Mozilla server if you currently use a version from the repositories of your Linux distribution to see if it behaves differently.
Thank you for your suggestions. I don't use a proxy, at least not in my default profile. I have a second profile for work where I set a proxy though, a SOCKS host (localhost) where I use a specific port from an SSH session to a customer's machine. If I use that work profile I can access the internet. Then I deleted the default profile and created a new one, still no internet access. Now I get this error (I've seen this before):
--- Mai 13 09:31:50 nuc audit[13407]: AVC apparmor="DENIED" operation="open" profile="snap.firefox.firefox" name="/run/NetworkManager/no-stub-resolv.conf" pid=13407 comm="firefox" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 Mai 13 09:31:50 nuc kernel: audit: type=1400 audit(1683963110.281:156): apparmor="DENIED" operation="open" profile="snap.firefox.firefox" name="/run/NetworkManager/no-stub-resolv.conf" pid=13407 comm="firefox" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 Mai 13 09:31:51 nuc audit[13407]: SECCOMP auid=1000 uid=1000 gid=1000 ses=8 subj=snap.firefox.firefox pid=13407 comm="firefox" exe="/snap/firefox/2667/usr/lib/firefox/firefox" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe26fe6673d code=0x50000 Mai 13 09:31:51 nuc kernel: audit: type=1326 audit(1683963111.257:157): auid=1000 uid=1000 gid=1000 ses=8 subj=snap.firefox.firefox pid=13407 comm="firefox" exe="/snap/firefox/2667/usr/lib/firefox/firefox" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe26fe6673d code=0x50000 ---
I will try the package based Firefox as well, it will most likely work, but I thought Snaps are the way to go and I should get it running (although I don't know how yet).
Edit: using the tarball based installation works well as expected.
Izmjenjeno od russian_roulette
I'm curious to know why you thought Snaps are the way to go?
jonzn4SUSE schrieb
I'm curious to know why you thought Snaps are the way to go?
That’s a good question, I just figured it would be since many things are moving in the direction of containerization. Ubuntu recommended to switch to Firefox snap so I tried and it doesn’t work for me. Don’t get me wrong, I’m not really biased or something, I’m fine either way (package based or snap/container based) as long as it works. Are you trying to avoid snaps? I can live with that, too.
Not avoiding Snap, was just curious. I use Appimage for Libre Office because the install has been failing for decades. Also, many user come here with this and other issues with Snap.
Izmjenjeno od jonzn4SUSE