netblue30 / firejail

Linux namespaces and seccomp-bpf sandbox
https://firejail.wordpress.com
GNU General Public License v2.0
5.72k stars 560 forks source link

telegram-desktop: screen sharing doesn't work #4711

Open reagentoo opened 2 years ago

reagentoo commented 2 years ago

Description

Can't force telegram-desktop to share the screen in firejail.

Steps to Reproduce

Steps to reproduce the behavior

  1. Run telegram-desktop
  2. Make a call
  3. Try to share the screen

Expected behavior

Screen sharing

Actual behavior

Don't see captured screen preview, caller doesn't see my screen.

Behavior without a profile

Additional context

Environment

Compile time support:

Checklist

Log

Output of LC_ALL=C firejail /path/to/program

``` $ LC_ALL=C firejail /usr/bin/telegram-desktop Reading profile /etc/firejail/telegram-desktop.profile Reading profile /etc/firejail/telegram.profile Reading profile /home/user/.config/firejail/telegram.local Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-exec.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-passwdmgr.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/disable-shell.inc Reading profile /etc/firejail/disable-xdg.inc Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-runuser-common.inc Reading profile /etc/firejail/whitelist-usr-share-common.inc Reading profile /etc/firejail/whitelist-var-common.inc Parent pid 3813, child pid 3816 Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. Warning: skipping alternatives for private /etc Warning: skipping crypto-policies for private /etc Private /etc installed in 17.28 ms Private /usr/etc installed in 0.00 ms Child process initialized in 74.79 ms (telegram-desktop:18): Telegram-WARNING **: 22:55:05.187: Application was built without embedded fonts, this may lead to font issues. error: : cannot open error: : cannot open error: : cannot open D/tgvoip: === Updating voip config === D/tgvoip: {"enable_vp8_encoder":true,"enable_vp8_decoder":true,"enable_vp9_encoder":true,"enable_vp9_decoder":true,"enable_h265_encoder":true,"enable_h265_decoder":true,"enable_h264_encoder":true,"enable_h264_decoder":true,"audio_frame_size":60,"jitter_min_delay_60":2,"jitter_max_delay_60":10,"jitter_max_slots_60":20,"jitter_losses_to_reset":20,"jitter_resync_threshold":0.5,"audio_congestion_window":1024,"audio_max_bitrate":20000,"audio_max_bitrate_edge":16000,"audio_max_bitrate_gprs":8000,"audio_max_bitrate_saving":8000,"audio_init_bitrate":16000,"audio_init_bitrate_edge":8000,"audio_init_bitrate_gprs":8000,"audio_init_bitrate_saving":8000,"audio_bitrate_step_incr":1000,"audio_bitrate_step_decr":1000,"use_system_ns":true,"use_system_aec":true,"force_tcp":false,"jitter_initial_delay_60":2,"adsp_good_impls":"(Qualcomm Fluence)","bad_call_rating":true,"use_ios_vpio_agc":false,"use_tcp":false,"audio_medium_fec_bitrate":20000,"audio_medium_fec_multiplier":0.1,"audio_strong_fec_bitrate":7000} Invalid return value 0 for stream protocol Invalid return value 0 for stream protocol Invalid return value 0 for stream protocol Invalid return value 0 for stream protocol Invalid return value 0 for stream protocol Invalid return value 0 for stream protocol Invalid return value 0 for stream protocol Invalid return value 0 for stream protocol Parent is shutting down, bye... ```

Output of LC_ALL=C firejail --debug /path/to/program

``` $ LC_ALL=C firejail --debug /usr/bin/telegram-desktop Autoselecting /bin/bash as shell Building quoted command line: '/usr/bin/telegram-desktop' Command name #telegram-desktop# Found telegram-desktop.profile profile in /etc/firejail directory Reading profile /etc/firejail/telegram-desktop.profile Found telegram.profile profile in /etc/firejail directory Reading profile /etc/firejail/telegram.profile Found telegram.local profile in /home/user/.config/firejail directory Reading profile /home/user/.config/firejail/telegram.local Found disable-common.inc profile in /etc/firejail directory Reading profile /etc/firejail/disable-common.inc Found disable-devel.inc profile in /etc/firejail directory Reading profile /etc/firejail/disable-devel.inc Found disable-exec.inc profile in /etc/firejail directory Reading profile /etc/firejail/disable-exec.inc Found disable-interpreters.inc profile in /etc/firejail directory Reading profile /etc/firejail/disable-interpreters.inc Found disable-passwdmgr.inc profile in /etc/firejail directory Reading profile /etc/firejail/disable-passwdmgr.inc Found disable-programs.inc profile in /etc/firejail directory Reading profile /etc/firejail/disable-programs.inc Found disable-shell.inc profile in /etc/firejail directory Reading profile /etc/firejail/disable-shell.inc Found disable-xdg.inc profile in /etc/firejail directory Reading profile /etc/firejail/disable-xdg.inc Found whitelist-common.inc profile in /etc/firejail directory Reading profile /etc/firejail/whitelist-common.inc Found whitelist-runuser-common.inc profile in /etc/firejail directory Reading profile /etc/firejail/whitelist-runuser-common.inc Found whitelist-usr-share-common.inc profile in /etc/firejail directory Reading profile /etc/firejail/whitelist-usr-share-common.inc Found whitelist-var-common.inc profile in /etc/firejail directory Reading profile /etc/firejail/whitelist-var-common.inc [profile] combined protocol list: "unix,inet,inet6,netlink" DISPLAY=:0 parsed as 0 xdg-dbus-proxy arg: unix:abstract=/tmp/dbus-S9WzqF9YaI,guid=432da4f8babd2d9696b0eb95619de53e xdg-dbus-proxy arg: /run/firejail/dbus/1000/4114-user xdg-dbus-proxy arg: --filter xdg-dbus-proxy arg: --talk=org.freedesktop.portal.Desktop xdg-dbus-proxy arg: --own=org.telegram.desktop.* xdg-dbus-proxy arg: --talk=org.freedesktop.Notifications xdg-dbus-proxy arg: --talk=org.kde.StatusNotifierWatcher xdg-dbus-proxy arg: --talk=org.gnome.Mutter.IdleMonitor xdg-dbus-proxy arg: --talk=org.freedesktop.ScreenSaver starting xdg-dbus-proxy sbox exec: /usr/bin/xdg-dbus-proxy --fd=4 --args=5 Dropping all capabilities Drop privileges: pid 4115, uid 1000, gid 1000, nogroups 1 No supplementary groups xdg-dbus-proxy initialized Using the local network stack Parent pid 4114, child pid 4117 Initializing child process Host network configured PID namespace installed Mounting tmpfs on /run/firejail/mnt directory Creating empty /run/firejail/mnt/seccomp directory Creating empty /run/firejail/mnt/seccomp/seccomp.protocol file Creating empty /run/firejail/mnt/seccomp/seccomp.postexec file Creating empty /run/firejail/mnt/seccomp/seccomp.postexec32 file IBUS_ADDRESS=unix:abstract=/home/user/.cache/ibus/dbus-YxRVoV1h,guid=314233ff02179b3acbe6421a607f3d16 IBUS_DAEMON_PID=22609 Build protocol filter: unix,inet,inet6,netlink sbox run: /run/firejail/lib/fseccomp protocol build unix,inet,inet6,netlink /run/firejail/mnt/seccomp/seccomp.protocol Dropping all capabilities Drop privileges: pid 2, uid 1000, gid 1000, nogroups 1 No supplementary groups Mounting /proc filesystem representing the PID namespace Basic read-only filesystem: Mounting read-only /etc 86 53 253:1 /etc /etc ro,relatime - ext4 /dev/dm-1 rw,discard mountid=86 fsname=/etc dir=/etc fstype=ext4 Mounting noexec /etc 87 86 253:1 /etc /etc ro,nosuid,nodev,noexec,relatime - ext4 /dev/dm-1 rw,discard mountid=87 fsname=/etc dir=/etc fstype=ext4 Mounting read-only /var 90 88 0:34 / /var/tmp rw,nosuid,nodev,relatime - tmpfs tmpfs rw,size=16777216k,inode64 mountid=90 fsname=/ dir=/var/tmp fstype=tmpfs Mounting read-only /var/log 91 89 7:1 / /var/log ro,relatime - ext4 /dev/loop1 rw,discard mountid=91 fsname=/ dir=/var/log fstype=ext4 Mounting read-only /var/tmp 92 90 0:34 / /var/tmp ro,nosuid,nodev,relatime - tmpfs tmpfs rw,size=16777216k,inode64 mountid=92 fsname=/ dir=/var/tmp fstype=tmpfs Mounting noexec /var 97 96 0:34 / /var/tmp ro,nosuid,nodev,relatime - tmpfs tmpfs rw,size=16777216k,inode64 mountid=97 fsname=/ dir=/var/tmp fstype=tmpfs Mounting noexec /var/log 98 95 7:1 / /var/log ro,nosuid,nodev,noexec,relatime - ext4 /dev/loop1 rw,discard mountid=98 fsname=/ dir=/var/log fstype=ext4 Mounting noexec /var/tmp 99 97 0:34 / /var/tmp ro,nosuid,nodev,noexec,relatime - tmpfs tmpfs rw,size=16777216k,inode64 mountid=99 fsname=/ dir=/var/tmp fstype=tmpfs Mounting read-only /usr 100 53 253:1 /usr /usr ro,relatime - ext4 /dev/dm-1 rw,discard mountid=100 fsname=/usr dir=/usr fstype=ext4 Mounting read-only /bin 101 53 253:1 /bin /bin ro,relatime - ext4 /dev/dm-1 rw,discard mountid=101 fsname=/bin dir=/bin fstype=ext4 Mounting read-only /sbin 102 53 253:1 /sbin /sbin ro,relatime - ext4 /dev/dm-1 rw,discard mountid=102 fsname=/sbin dir=/sbin fstype=ext4 Mounting read-only /lib 103 53 253:1 /lib /lib ro,relatime - ext4 /dev/dm-1 rw,discard mountid=103 fsname=/lib dir=/lib fstype=ext4 Mounting read-only /lib64 104 53 253:1 /lib64 /lib64 ro,relatime - ext4 /dev/dm-1 rw,discard mountid=104 fsname=/lib64 dir=/lib64 fstype=ext4 Mounting tmpfs on /var/lock Mounting tmpfs on /var/tmp Mounting tmpfs on /var/log Create the new utmp file Mount the new utmp file Cleaning /home directory Cleaning /run/user directory Sanitizing /etc/passwd, UID_MIN 1000 Sanitizing /etc/group, GID_MIN 1000 Disable /home/user/.config/firejail Disable /run/firejail/network Disable /run/firejail/bandwidth Disable /run/firejail/name Disable /run/firejail/profile Disable /run/firejail/x11 Mounting tmpfs on /dev mounting /run/firejail/mnt/dev/snd directory mounting /run/firejail/mnt/dev/dri directory mounting /run/firejail/mnt/dev/video0 file mounting /run/firejail/mnt/dev/video1 file mounting /run/firejail/mnt/dev/hidraw0 file mounting /run/firejail/mnt/dev/hidraw1 file mounting /run/firejail/mnt/dev/hidraw2 file mounting /run/firejail/mnt/dev/hidraw3 file mounting /run/firejail/mnt/dev/hidraw4 file mounting /run/firejail/mnt/dev/hidraw5 file mounting /run/firejail/mnt/dev/usb directory Process /dev/shm directory Generate private-tmp whitelist commands Creating empty /run/firejail/mnt/dbus directory Creating empty /run/firejail/mnt/dbus/user file Creating empty /run/firejail/mnt/dbus/system file blacklist /run/dbus/system_bus_socket blacklist /run/firejail/dbus Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. Mounting read-only /proc/sys Remounting /sys directory Disable /sys/firmware Disable /sys/power Disable /sys/kernel/debug Disable /sys/kernel/vmcoreinfo Disable /proc/sys/fs/binfmt_misc Disable /proc/sys/kernel/core_pattern Disable /proc/sys/kernel/modprobe Disable /proc/sysrq-trigger Disable /proc/sys/vm/panic_on_oom Disable /proc/irq Disable /proc/bus Disable /proc/timer_list Disable /proc/kcore Disable /proc/kallsyms Disable /usr/src/linux-5.15.4-gentoo-dist (requested /usr/src/linux) Disable /lib/modules Disable /usr/lib/debug Disable /boot Disable /run/user/1000/gnupg Disable /run/user/1000/systemd Disable /proc/kmsg Copying files in the new /etc directory: Copying /etc/alsa to private /etc Creating empty /run/firejail/mnt/etc/alsa directory sbox run: /run/firejail/lib/fcopy /etc/alsa /run/firejail/mnt/etc/alsa Warning: file /etc/alternatives not found. Warning: skipping alternatives for private /etc Copying /etc/ca-certificates to private /etc Creating empty /run/firejail/mnt/etc/ca-certificates directory sbox run: /run/firejail/lib/fcopy /etc/ca-certificates /run/firejail/mnt/etc/ca-certificates Warning: file /etc/crypto-policies not found. Warning: skipping crypto-policies for private /etc Copying /etc/fonts to private /etc Creating empty /run/firejail/mnt/etc/fonts directory sbox run: /run/firejail/lib/fcopy /etc/fonts /run/firejail/mnt/etc/fonts Copying /etc/group to private /etc sbox run: /run/firejail/lib/fcopy /etc/group /run/firejail/mnt/etc Copying /etc/ld.so.cache to private /etc sbox run: /run/firejail/lib/fcopy /etc/ld.so.cache /run/firejail/mnt/etc Copying /etc/localtime to private /etc sbox run: /run/firejail/lib/fcopy /etc/localtime /run/firejail/mnt/etc Copying /etc/machine-id to private /etc sbox run: /run/firejail/lib/fcopy /etc/machine-id /run/firejail/mnt/etc Copying /etc/os-release to private /etc sbox run: /run/firejail/lib/fcopy /etc/os-release /run/firejail/mnt/etc Copying /etc/passwd to private /etc sbox run: /run/firejail/lib/fcopy /etc/passwd /run/firejail/mnt/etc Copying /etc/pki to private /etc Creating empty /run/firejail/mnt/etc/pki directory sbox run: /run/firejail/lib/fcopy /etc/pki /run/firejail/mnt/etc/pki Copying /etc/pulse to private /etc Creating empty /run/firejail/mnt/etc/pulse directory sbox run: /run/firejail/lib/fcopy /etc/pulse /run/firejail/mnt/etc/pulse Copying /etc/resolv.conf to private /etc sbox run: /run/firejail/lib/fcopy /etc/resolv.conf /run/firejail/mnt/etc Copying /etc/ssl to private /etc Creating empty /run/firejail/mnt/etc/ssl directory sbox run: /run/firejail/lib/fcopy /etc/ssl /run/firejail/mnt/etc/ssl Copying /etc/xdg to private /etc Creating empty /run/firejail/mnt/etc/xdg directory sbox run: /run/firejail/lib/fcopy /etc/xdg /run/firejail/mnt/etc/xdg Mount-bind /run/firejail/mnt/etc on top of /etc Private /etc installed in 18.21 ms Cannot find /usr/etc: No such file or directory Mount-bind /run/firejail/mnt/usretc on top of /usr/etc Cannot find /usr/etc: No such file or directory Private /usr/etc installed in 0.01 ms Debug 553: whitelist ${HOME}/Pictures Debug 574: expanded: /home/user/Pictures Debug 585: new_name: /home/user/Pictures Debug 599: dir: /home/user Adding whitelist top level directory /home/user Debug 553: whitelist ${HOME}/Videos Debug 574: expanded: /home/user/Videos Debug 585: new_name: /home/user/Videos Debug 599: dir: /home/user Debug 553: whitelist /usr/share/pipewire/client.conf Debug 574: expanded: /usr/share/pipewire/client.conf Debug 585: new_name: /usr/share/pipewire/client.conf Debug 599: dir: /usr/share Adding whitelist top level directory /usr/share Debug 553: whitelist ${HOME}/.TelegramDesktop Debug 574: expanded: /home/user/.TelegramDesktop Debug 585: new_name: /home/user/.TelegramDesktop Debug 599: dir: /home/user Debug 553: whitelist ${HOME}/.local/share/TelegramDesktop Debug 574: expanded: /home/user/.local/share/TelegramDesktop Debug 585: new_name: /home/user/.local/share/TelegramDesktop Debug 599: dir: /home/user Debug 553: whitelist ${DOWNLOADS} Directory ${DOWNLOADS} resolved as Downloads Debug 574: expanded: /home/user/Downloads Debug 585: new_name: /home/user/Downloads Debug 599: dir: /home/user Debug 553: whitelist ${HOME}/.XCompose Debug 574: expanded: /home/user/.XCompose Debug 585: new_name: /home/user/.XCompose Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.XCompose expanded: /home/user/.XCompose realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.alsaequal.bin Debug 574: expanded: /home/user/.alsaequal.bin Debug 585: new_name: /home/user/.alsaequal.bin Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.alsaequal.bin expanded: /home/user/.alsaequal.bin realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.asoundrc Debug 574: expanded: /home/user/.asoundrc Debug 585: new_name: /home/user/.asoundrc Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.asoundrc expanded: /home/user/.asoundrc realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.config/ibus Debug 574: expanded: /home/user/.config/ibus Debug 585: new_name: /home/user/.config/ibus Debug 599: dir: /home/user Debug 553: whitelist ${HOME}/.config/mimeapps.list Debug 574: expanded: /home/user/.config/mimeapps.list Debug 585: new_name: /home/user/.config/mimeapps.list Debug 599: dir: /home/user Debug 553: whitelist ${HOME}/.config/pkcs11 Debug 574: expanded: /home/user/.config/pkcs11 Debug 585: new_name: /home/user/.config/pkcs11 Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.config/pkcs11 expanded: /home/user/.config/pkcs11 realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.config/user-dirs.dirs Debug 574: expanded: /home/user/.config/user-dirs.dirs Debug 585: new_name: /home/user/.config/user-dirs.dirs Debug 599: dir: /home/user Debug 553: whitelist ${HOME}/.config/user-dirs.locale Debug 574: expanded: /home/user/.config/user-dirs.locale Debug 585: new_name: /home/user/.config/user-dirs.locale Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.config/user-dirs.locale expanded: /home/user/.config/user-dirs.locale realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.drirc Debug 574: expanded: /home/user/.drirc Debug 585: new_name: /home/user/.drirc Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.drirc expanded: /home/user/.drirc realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.icons Debug 574: expanded: /home/user/.icons Debug 585: new_name: /home/user/.icons Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.icons expanded: /home/user/.icons realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.local/share/applications Debug 574: expanded: /home/user/.local/share/applications Debug 585: new_name: /home/user/.local/share/applications Debug 599: dir: /home/user Debug 553: whitelist ${HOME}/.local/share/icons Debug 574: expanded: /home/user/.local/share/icons Debug 585: new_name: /home/user/.local/share/icons Debug 599: dir: /home/user Debug 553: whitelist ${HOME}/.local/share/mime Debug 574: expanded: /home/user/.local/share/mime Debug 585: new_name: /home/user/.local/share/mime Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.local/share/mime expanded: /home/user/.local/share/mime realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.mime.types Debug 574: expanded: /home/user/.mime.types Debug 585: new_name: /home/user/.mime.types Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.mime.types expanded: /home/user/.mime.types realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.uim.d Debug 574: expanded: /home/user/.uim.d Debug 585: new_name: /home/user/.uim.d Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.uim.d expanded: /home/user/.uim.d realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.config/dconf Debug 574: expanded: /home/user/.config/dconf Debug 585: new_name: /home/user/.config/dconf Debug 599: dir: /home/user Debug 553: whitelist ${HOME}/.cache/fontconfig Debug 574: expanded: /home/user/.cache/fontconfig Debug 585: new_name: /home/user/.cache/fontconfig Debug 599: dir: /home/user Debug 553: whitelist ${HOME}/.config/fontconfig Debug 574: expanded: /home/user/.config/fontconfig Debug 585: new_name: /home/user/.config/fontconfig Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.config/fontconfig expanded: /home/user/.config/fontconfig realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.fontconfig Debug 574: expanded: /home/user/.fontconfig Debug 585: new_name: /home/user/.fontconfig Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.fontconfig expanded: /home/user/.fontconfig realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.fonts Debug 574: expanded: /home/user/.fonts Debug 585: new_name: /home/user/.fonts Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.fonts expanded: /home/user/.fonts realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.fonts.conf Debug 574: expanded: /home/user/.fonts.conf Debug 585: new_name: /home/user/.fonts.conf Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.fonts.conf expanded: /home/user/.fonts.conf realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.fonts.conf.d Debug 574: expanded: /home/user/.fonts.conf.d Debug 585: new_name: /home/user/.fonts.conf.d Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.fonts.conf.d expanded: /home/user/.fonts.conf.d realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.fonts.d Debug 574: expanded: /home/user/.fonts.d Debug 585: new_name: /home/user/.fonts.d Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.fonts.d expanded: /home/user/.fonts.d realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.local/share/fonts Debug 574: expanded: /home/user/.local/share/fonts Debug 585: new_name: /home/user/.local/share/fonts Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.local/share/fonts expanded: /home/user/.local/share/fonts realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.pangorc Debug 574: expanded: /home/user/.pangorc Debug 585: new_name: /home/user/.pangorc Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.pangorc expanded: /home/user/.pangorc realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.config/gtk-2.0 Debug 574: expanded: /home/user/.config/gtk-2.0 Debug 585: new_name: /home/user/.config/gtk-2.0 Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.config/gtk-2.0 expanded: /home/user/.config/gtk-2.0 realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.config/gtk-3.0 Debug 574: expanded: /home/user/.config/gtk-3.0 Debug 585: new_name: /home/user/.config/gtk-3.0 Debug 599: dir: /home/user Debug 553: whitelist ${HOME}/.config/gtk-4.0 Debug 574: expanded: /home/user/.config/gtk-4.0 Debug 585: new_name: /home/user/.config/gtk-4.0 Debug 599: dir: /home/user Debug 553: whitelist ${HOME}/.config/gtkrc Debug 574: expanded: /home/user/.config/gtkrc Debug 585: new_name: /home/user/.config/gtkrc Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.config/gtkrc expanded: /home/user/.config/gtkrc realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.config/gtkrc-2.0 Debug 574: expanded: /home/user/.config/gtkrc-2.0 Debug 585: new_name: /home/user/.config/gtkrc-2.0 Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.config/gtkrc-2.0 expanded: /home/user/.config/gtkrc-2.0 realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.gnome2 Debug 574: expanded: /home/user/.gnome2 Debug 585: new_name: /home/user/.gnome2 Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.gnome2 expanded: /home/user/.gnome2 realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.gnome2-private Debug 574: expanded: /home/user/.gnome2-private Debug 585: new_name: /home/user/.gnome2-private Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.gnome2-private expanded: /home/user/.gnome2-private realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.gtk-2.0 Debug 574: expanded: /home/user/.gtk-2.0 Debug 585: new_name: /home/user/.gtk-2.0 Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.gtk-2.0 expanded: /home/user/.gtk-2.0 realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.gtkrc Debug 574: expanded: /home/user/.gtkrc Debug 585: new_name: /home/user/.gtkrc Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.gtkrc expanded: /home/user/.gtkrc realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.gtkrc-2.0 Debug 574: expanded: /home/user/.gtkrc-2.0 Debug 585: new_name: /home/user/.gtkrc-2.0 Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.gtkrc-2.0 expanded: /home/user/.gtkrc-2.0 realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.kde/share/config/gtkrc Debug 574: expanded: /home/user/.kde/share/config/gtkrc Debug 585: new_name: /home/user/.kde/share/config/gtkrc Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.kde/share/config/gtkrc expanded: /home/user/.kde/share/config/gtkrc realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.kde/share/config/gtkrc-2.0 Debug 574: expanded: /home/user/.kde/share/config/gtkrc-2.0 Debug 585: new_name: /home/user/.kde/share/config/gtkrc-2.0 Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.kde/share/config/gtkrc-2.0 expanded: /home/user/.kde/share/config/gtkrc-2.0 realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.kde4/share/config/gtkrc Debug 574: expanded: /home/user/.kde4/share/config/gtkrc Debug 585: new_name: /home/user/.kde4/share/config/gtkrc Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.kde4/share/config/gtkrc expanded: /home/user/.kde4/share/config/gtkrc realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.kde4/share/config/gtkrc-2.0 Debug 574: expanded: /home/user/.kde4/share/config/gtkrc-2.0 Debug 585: new_name: /home/user/.kde4/share/config/gtkrc-2.0 Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.kde4/share/config/gtkrc-2.0 expanded: /home/user/.kde4/share/config/gtkrc-2.0 realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.local/share/themes Debug 574: expanded: /home/user/.local/share/themes Debug 585: new_name: /home/user/.local/share/themes Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.local/share/themes expanded: /home/user/.local/share/themes realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.themes Debug 574: expanded: /home/user/.themes Debug 585: new_name: /home/user/.themes Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.themes expanded: /home/user/.themes realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.cache/kioexec/krun Debug 574: expanded: /home/user/.cache/kioexec/krun Debug 585: new_name: /home/user/.cache/kioexec/krun Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.cache/kioexec/krun expanded: /home/user/.cache/kioexec/krun realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.config/Kvantum Debug 574: expanded: /home/user/.config/Kvantum Debug 585: new_name: /home/user/.config/Kvantum Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.config/Kvantum expanded: /home/user/.config/Kvantum realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.config/Trolltech.conf Debug 574: expanded: /home/user/.config/Trolltech.conf Debug 585: new_name: /home/user/.config/Trolltech.conf Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.config/Trolltech.conf expanded: /home/user/.config/Trolltech.conf realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.config/QtProject.conf Debug 574: expanded: /home/user/.config/QtProject.conf Debug 585: new_name: /home/user/.config/QtProject.conf Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.config/QtProject.conf expanded: /home/user/.config/QtProject.conf realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.config/kdeglobals Debug 574: expanded: /home/user/.config/kdeglobals Debug 585: new_name: /home/user/.config/kdeglobals Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.config/kdeglobals expanded: /home/user/.config/kdeglobals realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.config/kio_httprc Debug 574: expanded: /home/user/.config/kio_httprc Debug 585: new_name: /home/user/.config/kio_httprc Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.config/kio_httprc expanded: /home/user/.config/kio_httprc realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.config/kioslaverc Debug 574: expanded: /home/user/.config/kioslaverc Debug 585: new_name: /home/user/.config/kioslaverc Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.config/kioslaverc expanded: /home/user/.config/kioslaverc realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.config/ksslcablacklist Debug 574: expanded: /home/user/.config/ksslcablacklist Debug 585: new_name: /home/user/.config/ksslcablacklist Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.config/ksslcablacklist expanded: /home/user/.config/ksslcablacklist realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.config/qt5ct Debug 574: expanded: /home/user/.config/qt5ct Debug 585: new_name: /home/user/.config/qt5ct Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.config/qt5ct expanded: /home/user/.config/qt5ct realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.config/qtcurve Debug 574: expanded: /home/user/.config/qtcurve Debug 585: new_name: /home/user/.config/qtcurve Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.config/qtcurve expanded: /home/user/.config/qtcurve realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.kde/share/config/kdeglobals Debug 574: expanded: /home/user/.kde/share/config/kdeglobals Debug 585: new_name: /home/user/.kde/share/config/kdeglobals Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.kde/share/config/kdeglobals expanded: /home/user/.kde/share/config/kdeglobals realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.kde/share/config/kio_httprc Debug 574: expanded: /home/user/.kde/share/config/kio_httprc Debug 585: new_name: /home/user/.kde/share/config/kio_httprc Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.kde/share/config/kio_httprc expanded: /home/user/.kde/share/config/kio_httprc realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.kde/share/config/kioslaverc Debug 574: expanded: /home/user/.kde/share/config/kioslaverc Debug 585: new_name: /home/user/.kde/share/config/kioslaverc Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.kde/share/config/kioslaverc expanded: /home/user/.kde/share/config/kioslaverc realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.kde/share/config/ksslcablacklist Debug 574: expanded: /home/user/.kde/share/config/ksslcablacklist Debug 585: new_name: /home/user/.kde/share/config/ksslcablacklist Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.kde/share/config/ksslcablacklist expanded: /home/user/.kde/share/config/ksslcablacklist realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.kde/share/config/oxygenrc Debug 574: expanded: /home/user/.kde/share/config/oxygenrc Debug 585: new_name: /home/user/.kde/share/config/oxygenrc Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.kde/share/config/oxygenrc expanded: /home/user/.kde/share/config/oxygenrc realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.kde/share/icons Debug 574: expanded: /home/user/.kde/share/icons Debug 585: new_name: /home/user/.kde/share/icons Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.kde/share/icons expanded: /home/user/.kde/share/icons realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.kde4/share/config/kdeglobals Debug 574: expanded: /home/user/.kde4/share/config/kdeglobals Debug 585: new_name: /home/user/.kde4/share/config/kdeglobals Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.kde4/share/config/kdeglobals expanded: /home/user/.kde4/share/config/kdeglobals realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.kde4/share/config/kio_httprc Debug 574: expanded: /home/user/.kde4/share/config/kio_httprc Debug 585: new_name: /home/user/.kde4/share/config/kio_httprc Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.kde4/share/config/kio_httprc expanded: /home/user/.kde4/share/config/kio_httprc realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.kde4/share/config/kioslaverc Debug 574: expanded: /home/user/.kde4/share/config/kioslaverc Debug 585: new_name: /home/user/.kde4/share/config/kioslaverc Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.kde4/share/config/kioslaverc expanded: /home/user/.kde4/share/config/kioslaverc realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.kde4/share/config/ksslcablacklist Debug 574: expanded: /home/user/.kde4/share/config/ksslcablacklist Debug 585: new_name: /home/user/.kde4/share/config/ksslcablacklist Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.kde4/share/config/ksslcablacklist expanded: /home/user/.kde4/share/config/ksslcablacklist realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.kde4/share/config/oxygenrc Debug 574: expanded: /home/user/.kde4/share/config/oxygenrc Debug 585: new_name: /home/user/.kde4/share/config/oxygenrc Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.kde4/share/config/oxygenrc expanded: /home/user/.kde4/share/config/oxygenrc realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.kde4/share/icons Debug 574: expanded: /home/user/.kde4/share/icons Debug 585: new_name: /home/user/.kde4/share/icons Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.kde4/share/icons expanded: /home/user/.kde4/share/icons realpath: (null) No such file or directory Debug 553: whitelist ${HOME}/.local/share/qt5ct Debug 574: expanded: /home/user/.local/share/qt5ct Debug 585: new_name: /home/user/.local/share/qt5ct Debug 599: dir: /home/user Removed path: whitelist ${HOME}/.local/share/qt5ct expanded: /home/user/.local/share/qt5ct realpath: (null) No such file or directory Debug 553: whitelist ${RUNUSER}/bus Debug 574: expanded: /run/user/1000/bus Debug 585: new_name: /run/user/1000/bus Debug 599: dir: /run/user/1000 Adding whitelist top level directory /run/user/1000 Removed path: whitelist ${RUNUSER}/bus expanded: /run/user/1000/bus realpath: (null) No such file or directory Debug 553: whitelist ${RUNUSER}/dconf Debug 574: expanded: /run/user/1000/dconf Debug 585: new_name: /run/user/1000/dconf Debug 599: dir: /run/user/1000 Debug 553: whitelist ${RUNUSER}/gdm/Xauthority Debug 574: expanded: /run/user/1000/gdm/Xauthority Debug 585: new_name: /run/user/1000/gdm/Xauthority Debug 599: dir: /run/user/1000 Removed path: whitelist ${RUNUSER}/gdm/Xauthority expanded: /run/user/1000/gdm/Xauthority realpath: (null) No such file or directory Debug 553: whitelist ${RUNUSER}/ICEauthority Debug 574: expanded: /run/user/1000/ICEauthority Debug 585: new_name: /run/user/1000/ICEauthority Debug 599: dir: /run/user/1000 Debug 553: whitelist ${RUNUSER}/.mutter-Xwaylandauth.* Debug 574: expanded: /run/user/1000/.mutter-Xwaylandauth.* Debug 585: new_name: /run/user/1000/.mutter-Xwaylandauth.* Debug 599: dir: /run/user/1000 Removed path: whitelist ${RUNUSER}/.mutter-Xwaylandauth.* expanded: /run/user/1000/.mutter-Xwaylandauth.* realpath: (null) No such file or directory Adding new profile command: whitelist /run/user/1000/.mutter-Xwaylandauth.D94DD1 Debug 553: whitelist ${RUNUSER}/pulse/native Debug 574: expanded: /run/user/1000/pulse/native Debug 585: new_name: /run/user/1000/pulse/native Debug 599: dir: /run/user/1000 Debug 553: whitelist ${RUNUSER}/wayland-0 Debug 574: expanded: /run/user/1000/wayland-0 Debug 585: new_name: /run/user/1000/wayland-0 Debug 599: dir: /run/user/1000 Debug 553: whitelist ${RUNUSER}/wayland-1 Debug 574: expanded: /run/user/1000/wayland-1 Debug 585: new_name: /run/user/1000/wayland-1 Debug 599: dir: /run/user/1000 Removed path: whitelist ${RUNUSER}/wayland-1 expanded: /run/user/1000/wayland-1 realpath: (null) No such file or directory Debug 553: whitelist ${RUNUSER}/xauth_* Debug 574: expanded: /run/user/1000/xauth_* Debug 585: new_name: /run/user/1000/xauth_* Debug 599: dir: /run/user/1000 Removed path: whitelist ${RUNUSER}/xauth_* expanded: /run/user/1000/xauth_* realpath: (null) No such file or directory Debug 553: whitelist ${RUNUSER}/[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]] Debug 574: expanded: /run/user/1000/[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]] Debug 585: new_name: /run/user/1000/[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]] Debug 599: dir: /run/user/1000 Removed path: whitelist ${RUNUSER}/[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]] expanded: /run/user/1000/[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]] realpath: (null) File name too long Debug 553: whitelist /usr/share/alsa Debug 574: expanded: /usr/share/alsa Debug 585: new_name: /usr/share/alsa Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/applications Debug 574: expanded: /usr/share/applications Debug 585: new_name: /usr/share/applications Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/ca-certificates Debug 574: expanded: /usr/share/ca-certificates Debug 585: new_name: /usr/share/ca-certificates Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/crypto-policies Debug 574: expanded: /usr/share/crypto-policies Debug 585: new_name: /usr/share/crypto-policies Debug 599: dir: /usr/share Removed path: whitelist /usr/share/crypto-policies expanded: /usr/share/crypto-policies realpath: (null) No such file or directory Debug 553: whitelist /usr/share/cursors Debug 574: expanded: /usr/share/cursors Debug 585: new_name: /usr/share/cursors Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/dconf Debug 574: expanded: /usr/share/dconf Debug 585: new_name: /usr/share/dconf Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/distro-info Debug 574: expanded: /usr/share/distro-info Debug 585: new_name: /usr/share/distro-info Debug 599: dir: /usr/share Removed path: whitelist /usr/share/distro-info expanded: /usr/share/distro-info realpath: (null) No such file or directory Debug 553: whitelist /usr/share/drirc.d Debug 574: expanded: /usr/share/drirc.d Debug 585: new_name: /usr/share/drirc.d Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/enchant Debug 574: expanded: /usr/share/enchant Debug 585: new_name: /usr/share/enchant Debug 599: dir: /usr/share Removed path: whitelist /usr/share/enchant expanded: /usr/share/enchant realpath: (null) No such file or directory Debug 553: whitelist /usr/share/enchant-2 Debug 574: expanded: /usr/share/enchant-2 Debug 585: new_name: /usr/share/enchant-2 Debug 599: dir: /usr/share Removed path: whitelist /usr/share/enchant-2 expanded: /usr/share/enchant-2 realpath: (null) No such file or directory Debug 553: whitelist /usr/share/file Debug 574: expanded: /usr/share/file Debug 585: new_name: /usr/share/file Debug 599: dir: /usr/share Removed path: whitelist /usr/share/file expanded: /usr/share/file realpath: (null) No such file or directory Debug 553: whitelist /usr/share/fontconfig Debug 574: expanded: /usr/share/fontconfig Debug 585: new_name: /usr/share/fontconfig Debug 599: dir: /usr/share Removed path: whitelist /usr/share/fontconfig expanded: /usr/share/fontconfig realpath: (null) No such file or directory Debug 553: whitelist /usr/share/fonts Debug 574: expanded: /usr/share/fonts Debug 585: new_name: /usr/share/fonts Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/fonts-config Debug 574: expanded: /usr/share/fonts-config Debug 585: new_name: /usr/share/fonts-config Debug 599: dir: /usr/share Removed path: whitelist /usr/share/fonts-config expanded: /usr/share/fonts-config realpath: (null) No such file or directory Debug 553: whitelist /usr/share/gir-1.0 Debug 574: expanded: /usr/share/gir-1.0 Debug 585: new_name: /usr/share/gir-1.0 Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/gjs-1.0 Debug 574: expanded: /usr/share/gjs-1.0 Debug 585: new_name: /usr/share/gjs-1.0 Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/glib-2.0 Debug 574: expanded: /usr/share/glib-2.0 Debug 585: new_name: /usr/share/glib-2.0 Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/glvnd Debug 574: expanded: /usr/share/glvnd Debug 585: new_name: /usr/share/glvnd Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/gtk-2.0 Debug 574: expanded: /usr/share/gtk-2.0 Debug 585: new_name: /usr/share/gtk-2.0 Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/gtk-3.0 Debug 574: expanded: /usr/share/gtk-3.0 Debug 585: new_name: /usr/share/gtk-3.0 Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/gtk-engines Debug 574: expanded: /usr/share/gtk-engines Debug 585: new_name: /usr/share/gtk-engines Debug 599: dir: /usr/share Removed path: whitelist /usr/share/gtk-engines expanded: /usr/share/gtk-engines realpath: (null) No such file or directory Debug 553: whitelist /usr/share/gtksourceview-3.0 Debug 574: expanded: /usr/share/gtksourceview-3.0 Debug 585: new_name: /usr/share/gtksourceview-3.0 Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/gtksourceview-4 Debug 574: expanded: /usr/share/gtksourceview-4 Debug 585: new_name: /usr/share/gtksourceview-4 Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/hunspell Debug 574: expanded: /usr/share/hunspell Debug 585: new_name: /usr/share/hunspell Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/hwdata Debug 574: expanded: /usr/share/hwdata Debug 585: new_name: /usr/share/hwdata Debug 599: dir: /usr/share Removed path: whitelist /usr/share/hwdata expanded: /usr/share/hwdata realpath: (null) No such file or directory Debug 553: whitelist /usr/share/icons Debug 574: expanded: /usr/share/icons Debug 585: new_name: /usr/share/icons Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/icu Debug 574: expanded: /usr/share/icu Debug 585: new_name: /usr/share/icu Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/knotifications5 Debug 574: expanded: /usr/share/knotifications5 Debug 585: new_name: /usr/share/knotifications5 Debug 599: dir: /usr/share Removed path: whitelist /usr/share/knotifications5 expanded: /usr/share/knotifications5 realpath: (null) No such file or directory Debug 553: whitelist /usr/share/kservices5 Debug 574: expanded: /usr/share/kservices5 Debug 585: new_name: /usr/share/kservices5 Debug 599: dir: /usr/share Removed path: whitelist /usr/share/kservices5 expanded: /usr/share/kservices5 realpath: (null) No such file or directory Debug 553: whitelist /usr/share/Kvantum Debug 574: expanded: /usr/share/Kvantum Debug 585: new_name: /usr/share/Kvantum Debug 599: dir: /usr/share Removed path: whitelist /usr/share/Kvantum expanded: /usr/share/Kvantum realpath: (null) No such file or directory Debug 553: whitelist /usr/share/kxmlgui5 Debug 574: expanded: /usr/share/kxmlgui5 Debug 585: new_name: /usr/share/kxmlgui5 Debug 599: dir: /usr/share Removed path: whitelist /usr/share/kxmlgui5 expanded: /usr/share/kxmlgui5 realpath: (null) No such file or directory Debug 553: whitelist /usr/share/libdrm Debug 574: expanded: /usr/share/libdrm Debug 585: new_name: /usr/share/libdrm Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/libthai Debug 574: expanded: /usr/share/libthai Debug 585: new_name: /usr/share/libthai Debug 599: dir: /usr/share Removed path: whitelist /usr/share/libthai expanded: /usr/share/libthai realpath: (null) No such file or directory Debug 553: whitelist /usr/share/locale Debug 574: expanded: /usr/share/locale Debug 585: new_name: /usr/share/locale Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/mime Debug 574: expanded: /usr/share/mime Debug 585: new_name: /usr/share/mime Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/misc Debug 574: expanded: /usr/share/misc Debug 585: new_name: /usr/share/misc Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/Modules Debug 574: expanded: /usr/share/Modules Debug 585: new_name: /usr/share/Modules Debug 599: dir: /usr/share Removed path: whitelist /usr/share/Modules expanded: /usr/share/Modules realpath: (null) No such file or directory Debug 553: whitelist /usr/share/myspell Debug 574: expanded: /usr/share/myspell Debug 585: new_name: /usr/share/myspell Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/p11-kit Debug 574: expanded: /usr/share/p11-kit Debug 585: new_name: /usr/share/p11-kit Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/perl Debug 574: expanded: /usr/share/perl Debug 585: new_name: /usr/share/perl Debug 599: dir: /usr/share Removed path: whitelist /usr/share/perl expanded: /usr/share/perl realpath: (null) No such file or directory Debug 553: whitelist /usr/share/perl5 Debug 574: expanded: /usr/share/perl5 Debug 585: new_name: /usr/share/perl5 Debug 599: dir: /usr/share Removed path: whitelist /usr/share/perl5 expanded: /usr/share/perl5 realpath: (null) No such file or directory Debug 553: whitelist /usr/share/pixmaps Debug 574: expanded: /usr/share/pixmaps Debug 585: new_name: /usr/share/pixmaps Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/pki Debug 574: expanded: /usr/share/pki Debug 585: new_name: /usr/share/pki Debug 599: dir: /usr/share Removed path: whitelist /usr/share/pki expanded: /usr/share/pki realpath: (null) No such file or directory Debug 553: whitelist /usr/share/plasma Debug 574: expanded: /usr/share/plasma Debug 585: new_name: /usr/share/plasma Debug 599: dir: /usr/share Removed path: whitelist /usr/share/plasma expanded: /usr/share/plasma realpath: (null) No such file or directory Debug 553: whitelist /usr/share/publicsuffix Debug 574: expanded: /usr/share/publicsuffix Debug 585: new_name: /usr/share/publicsuffix Debug 599: dir: /usr/share Removed path: whitelist /usr/share/publicsuffix expanded: /usr/share/publicsuffix realpath: (null) No such file or directory Debug 553: whitelist /usr/share/qt Debug 574: expanded: /usr/share/qt Debug 585: new_name: /usr/share/qt Debug 599: dir: /usr/share Removed path: whitelist /usr/share/qt expanded: /usr/share/qt realpath: (null) No such file or directory Debug 553: whitelist /usr/share/qt4 Debug 574: expanded: /usr/share/qt4 Debug 585: new_name: /usr/share/qt4 Debug 599: dir: /usr/share Removed path: whitelist /usr/share/qt4 expanded: /usr/share/qt4 realpath: (null) No such file or directory Debug 553: whitelist /usr/share/qt5 Debug 574: expanded: /usr/share/qt5 Debug 585: new_name: /usr/share/qt5 Debug 599: dir: /usr/share Removed path: whitelist /usr/share/qt5 expanded: /usr/share/qt5 realpath: (null) No such file or directory Debug 553: whitelist /usr/share/qt5ct Debug 574: expanded: /usr/share/qt5ct Debug 585: new_name: /usr/share/qt5ct Debug 599: dir: /usr/share Removed path: whitelist /usr/share/qt5ct expanded: /usr/share/qt5ct realpath: (null) No such file or directory Debug 553: whitelist /usr/share/sounds Debug 574: expanded: /usr/share/sounds Debug 585: new_name: /usr/share/sounds Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/tcl8.6 Debug 574: expanded: /usr/share/tcl8.6 Debug 585: new_name: /usr/share/tcl8.6 Debug 599: dir: /usr/share Removed path: whitelist /usr/share/tcl8.6 expanded: /usr/share/tcl8.6 realpath: (null) No such file or directory Debug 553: whitelist /usr/share/tcltk Debug 574: expanded: /usr/share/tcltk Debug 585: new_name: /usr/share/tcltk Debug 599: dir: /usr/share Removed path: whitelist /usr/share/tcltk expanded: /usr/share/tcltk realpath: (null) No such file or directory Debug 553: whitelist /usr/share/terminfo Debug 574: expanded: /usr/share/terminfo Debug 585: new_name: /usr/share/terminfo Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/texlive Debug 574: expanded: /usr/share/texlive Debug 585: new_name: /usr/share/texlive Debug 599: dir: /usr/share Removed path: whitelist /usr/share/texlive expanded: /usr/share/texlive realpath: (null) No such file or directory Debug 553: whitelist /usr/share/texmf Debug 574: expanded: /usr/share/texmf Debug 585: new_name: /usr/share/texmf Debug 599: dir: /usr/share Removed path: whitelist /usr/share/texmf expanded: /usr/share/texmf realpath: (null) No such file or directory Debug 553: whitelist /usr/share/themes Debug 574: expanded: /usr/share/themes Debug 585: new_name: /usr/share/themes Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/thumbnail.so Debug 574: expanded: /usr/share/thumbnail.so Debug 585: new_name: /usr/share/thumbnail.so Debug 599: dir: /usr/share Removed path: whitelist /usr/share/thumbnail.so expanded: /usr/share/thumbnail.so realpath: (null) No such file or directory Debug 553: whitelist /usr/share/uim Debug 574: expanded: /usr/share/uim Debug 585: new_name: /usr/share/uim Debug 599: dir: /usr/share Removed path: whitelist /usr/share/uim expanded: /usr/share/uim realpath: (null) No such file or directory Debug 553: whitelist /usr/share/vulkan Debug 574: expanded: /usr/share/vulkan Debug 585: new_name: /usr/share/vulkan Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/X11 Debug 574: expanded: /usr/share/X11 Debug 585: new_name: /usr/share/X11 Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/xml Debug 574: expanded: /usr/share/xml Debug 585: new_name: /usr/share/xml Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/zenity Debug 574: expanded: /usr/share/zenity Debug 585: new_name: /usr/share/zenity Debug 599: dir: /usr/share Debug 553: whitelist /usr/share/zoneinfo Debug 574: expanded: /usr/share/zoneinfo Debug 585: new_name: /usr/share/zoneinfo Debug 599: dir: /usr/share Debug 553: whitelist /var/lib/aspell Debug 574: expanded: /var/lib/aspell Debug 585: new_name: /var/lib/aspell Debug 599: dir: /var Adding whitelist top level directory /var Removed path: whitelist /var/lib/aspell expanded: /var/lib/aspell realpath: (null) No such file or directory Debug 553: whitelist /var/lib/ca-certificates Debug 574: expanded: /var/lib/ca-certificates Debug 585: new_name: /var/lib/ca-certificates Debug 599: dir: /var Removed path: whitelist /var/lib/ca-certificates expanded: /var/lib/ca-certificates realpath: (null) No such file or directory Debug 553: whitelist /var/lib/dbus Debug 574: expanded: /var/lib/dbus Debug 585: new_name: /var/lib/dbus Debug 599: dir: /var Debug 553: whitelist /var/lib/menu-xdg Debug 574: expanded: /var/lib/menu-xdg Debug 585: new_name: /var/lib/menu-xdg Debug 599: dir: /var Removed path: whitelist /var/lib/menu-xdg expanded: /var/lib/menu-xdg realpath: (null) No such file or directory Debug 553: whitelist /var/lib/uim Debug 574: expanded: /var/lib/uim Debug 585: new_name: /var/lib/uim Debug 599: dir: /var Removed path: whitelist /var/lib/uim expanded: /var/lib/uim realpath: (null) No such file or directory Debug 553: whitelist /var/cache/fontconfig Debug 574: expanded: /var/cache/fontconfig Debug 585: new_name: /var/cache/fontconfig Debug 599: dir: /var Debug 553: whitelist /var/tmp Debug 574: expanded: /var/tmp Debug 585: new_name: /var/tmp Debug 599: dir: /var Debug 553: whitelist /var/run Debug 574: expanded: /var/run Debug 585: new_name: /var/run Debug 599: dir: /var Debug 553: whitelist /var/lock Debug 574: expanded: /var/lock Debug 585: new_name: /var/lock Debug 599: dir: /var Debug 553: whitelist /tmp/.X11-unix Debug 574: expanded: /tmp/.X11-unix Debug 585: new_name: /tmp/.X11-unix Debug 599: dir: /tmp Adding whitelist top level directory /tmp Debug 553: whitelist /run/user/1000/.mutter-Xwaylandauth.D94DD1 Debug 574: expanded: /run/user/1000/.mutter-Xwaylandauth.D94DD1 Debug 585: new_name: /run/user/1000/.mutter-Xwaylandauth.D94DD1 Debug 599: dir: /run/user/1000 Mounting tmpfs on /usr/share, check owner: no 162 100 0:46 / /usr/share rw,nosuid,nodev,relatime - tmpfs tmpfs rw,mode=755,inode64 mountid=162 fsname=/ dir=/usr/share fstype=tmpfs Mounting tmpfs on /var, check owner: no 163 93 0:47 / /var rw,nosuid,nodev,noexec,relatime - tmpfs tmpfs rw,mode=755,inode64 mountid=163 fsname=/ dir=/var fstype=tmpfs Mounting tmpfs on /tmp, check owner: no 164 82 0:48 / /tmp rw,nosuid,nodev,noatime - tmpfs tmpfs rw,inode64 mountid=164 fsname=/ dir=/tmp fstype=tmpfs Mounting a new /root directory Mounting a new /home directory Create a new user directory Mounting tmpfs on /run/user/1000, check owner: no 167 113 0:51 / /run/user/1000 rw,nosuid,nodev,relatime - tmpfs tmpfs rw,mode=700,uid=1000,gid=1000,inode64 mountid=167 fsname=/ dir=/run/user/1000 fstype=tmpfs Debug 735: file: /home/user/Pictures; dirfd: 5; topdir: /home/user; rel: Pictures Whitelisting /home/user/Pictures 168 166 7:0 /user/Pictures /home/user/Pictures rw,relatime - ext4 /dev/loop0 rw,discard mountid=168 fsname=/user/Pictures dir=/home/user/Pictures fstype=ext4 Debug 735: file: /home/user/Videos; dirfd: 5; topdir: /home/user; rel: Videos Whitelisting /home/user/Videos 169 166 7:0 /user/Videos /home/user/Videos rw,relatime - ext4 /dev/loop0 rw,discard mountid=169 fsname=/user/Videos dir=/home/user/Videos fstype=ext4 Debug 735: file: /usr/share/pipewire/client.conf; dirfd: 6; topdir: /usr/share; rel: pipewire/client.conf Whitelisting /usr/share/pipewire/client.conf 170 162 253:1 /usr/share/pipewire/client.conf /usr/share/pipewire/client.conf ro,relatime - ext4 /dev/dm-1 rw,discard mountid=170 fsname=/usr/share/pipewire/client.conf dir=/usr/share/pipewire/client.conf fstype=ext4 Debug 735: file: /home/user/.TelegramDesktop; dirfd: 5; topdir: /home/user; rel: .TelegramDesktop Whitelisting /home/user/.TelegramDesktop 171 166 7:0 /user/.TelegramDesktop /home/user/.TelegramDesktop rw,relatime - ext4 /dev/loop0 rw,discard mountid=171 fsname=/user/.TelegramDesktop dir=/home/user/.TelegramDesktop fstype=ext4 Debug 735: file: /home/user/.local/share/TelegramDesktop; dirfd: 5; topdir: /home/user; rel: .local/share/TelegramDesktop Whitelisting /home/user/.local/share/TelegramDesktop 172 166 7:0 /user/.local/share/TelegramDesktop /home/user/.local/share/TelegramDesktop rw,relatime - ext4 /dev/loop0 rw,discard mountid=172 fsname=/user/.local/share/TelegramDesktop dir=/home/user/.local/share/TelegramDesktop fstype=ext4 Debug 735: file: /home/user/Downloads; dirfd: 5; topdir: /home/user; rel: Downloads Whitelisting /home/user/Downloads 173 166 7:0 /user/Downloads /home/user/Downloads rw,relatime - ext4 /dev/loop0 rw,discard mountid=173 fsname=/user/Downloads dir=/home/user/Downloads fstype=ext4 Debug 735: file: /home/user/.config/ibus; dirfd: 5; topdir: /home/user; rel: .config/ibus Whitelisting /home/user/.config/ibus 174 166 7:0 /user/.config/ibus /home/user/.config/ibus rw,relatime - ext4 /dev/loop0 rw,discard mountid=174 fsname=/user/.config/ibus dir=/home/user/.config/ibus fstype=ext4 Debug 735: file: /home/user/.config/mimeapps.list; dirfd: 5; topdir: /home/user; rel: .config/mimeapps.list Whitelisting /home/user/.config/mimeapps.list 175 166 7:0 /user/.config/mimeapps.list /home/user/.config/mimeapps.list rw,relatime - ext4 /dev/loop0 rw,discard mountid=175 fsname=/user/.config/mimeapps.list dir=/home/user/.config/mimeapps.list fstype=ext4 Debug 735: file: /home/user/.config/user-dirs.dirs; dirfd: 5; topdir: /home/user; rel: .config/user-dirs.dirs Whitelisting /home/user/.config/user-dirs.dirs 176 166 7:0 /user/.config/user-dirs.dirs /home/user/.config/user-dirs.dirs rw,relatime - ext4 /dev/loop0 rw,discard mountid=176 fsname=/user/.config/user-dirs.dirs dir=/home/user/.config/user-dirs.dirs fstype=ext4 Debug 735: file: /home/user/.local/share/applications; dirfd: 5; topdir: /home/user; rel: .local/share/applications Whitelisting /home/user/.local/share/applications 177 166 7:0 /user/.local/share/applications /home/user/.local/share/applications rw,relatime - ext4 /dev/loop0 rw,discard mountid=177 fsname=/user/.local/share/applications dir=/home/user/.local/share/applications fstype=ext4 Debug 735: file: /home/user/.local/share/icons; dirfd: 5; topdir: /home/user; rel: .local/share/icons Whitelisting /home/user/.local/share/icons 178 166 7:0 /user/.local/share/icons /home/user/.local/share/icons rw,relatime - ext4 /dev/loop0 rw,discard mountid=178 fsname=/user/.local/share/icons dir=/home/user/.local/share/icons fstype=ext4 Debug 735: file: /home/user/.config/dconf; dirfd: 5; topdir: /home/user; rel: .config/dconf Whitelisting /home/user/.config/dconf 179 166 7:0 /user/.config/dconf /home/user/.config/dconf rw,relatime - ext4 /dev/loop0 rw,discard mountid=179 fsname=/user/.config/dconf dir=/home/user/.config/dconf fstype=ext4 Debug 735: file: /home/user/.cache/fontconfig; dirfd: 5; topdir: /home/user; rel: .cache/fontconfig Whitelisting /home/user/.cache/fontconfig 180 166 7:0 /user/.cache/fontconfig /home/user/.cache/fontconfig rw,relatime - ext4 /dev/loop0 rw,discard mountid=180 fsname=/user/.cache/fontconfig dir=/home/user/.cache/fontconfig fstype=ext4 Debug 735: file: /home/user/.config/gtk-3.0; dirfd: 5; topdir: /home/user; rel: .config/gtk-3.0 Whitelisting /home/user/.config/gtk-3.0 181 166 7:0 /user/.config/gtk-3.0 /home/user/.config/gtk-3.0 rw,relatime - ext4 /dev/loop0 rw,discard mountid=181 fsname=/user/.config/gtk-3.0 dir=/home/user/.config/gtk-3.0 fstype=ext4 Debug 735: file: /home/user/.config/gtk-4.0; dirfd: 5; topdir: /home/user; rel: .config/gtk-4.0 Whitelisting /home/user/.config/gtk-4.0 182 166 7:0 /user/.config/gtk-4.0 /home/user/.config/gtk-4.0 rw,relatime - ext4 /dev/loop0 rw,discard mountid=182 fsname=/user/.config/gtk-4.0 dir=/home/user/.config/gtk-4.0 fstype=ext4 Debug 735: file: /run/user/1000/dconf; dirfd: 8; topdir: /run/user/1000; rel: dconf Whitelisting /run/user/1000/dconf 183 167 0:36 /dconf /run/user/1000/dconf rw,nosuid,nodev,relatime - tmpfs tmpfs rw,size=6519812k,nr_inodes=1629953,mode=700,uid=1000,gid=1000,inode64 mountid=183 fsname=/dconf dir=/run/user/1000/dconf fstype=tmpfs Debug 735: file: /run/user/1000/ICEauthority; dirfd: 8; topdir: /run/user/1000; rel: ICEauthority Whitelisting /run/user/1000/ICEauthority 184 167 0:36 /ICEauthority /run/user/1000/ICEauthority rw,nosuid,nodev,relatime - tmpfs tmpfs rw,size=6519812k,nr_inodes=1629953,mode=700,uid=1000,gid=1000,inode64 mountid=184 fsname=/ICEauthority dir=/run/user/1000/ICEauthority fstype=tmpfs Debug 735: file: /run/user/1000/pulse/native; dirfd: 8; topdir: /run/user/1000; rel: pulse/native Whitelisting /run/user/1000/pulse/native 185 167 0:36 /pulse/native /run/user/1000/pulse/native rw,nosuid,nodev,relatime - tmpfs tmpfs rw,size=6519812k,nr_inodes=1629953,mode=700,uid=1000,gid=1000,inode64 mountid=185 fsname=/pulse/native dir=/run/user/1000/pulse/native fstype=tmpfs Debug 735: file: /run/user/1000/wayland-0; dirfd: 8; topdir: /run/user/1000; rel: wayland-0 Whitelisting /run/user/1000/wayland-0 186 167 0:36 /wayland-0 /run/user/1000/wayland-0 rw,nosuid,nodev,relatime - tmpfs tmpfs rw,size=6519812k,nr_inodes=1629953,mode=700,uid=1000,gid=1000,inode64 mountid=186 fsname=/wayland-0 dir=/run/user/1000/wayland-0 fstype=tmpfs Debug 735: file: /usr/share/alsa; dirfd: 6; topdir: /usr/share; rel: alsa Whitelisting /usr/share/alsa 187 162 253:1 /usr/share/alsa /usr/share/alsa ro,relatime - ext4 /dev/dm-1 rw,discard mountid=187 fsname=/usr/share/alsa dir=/usr/share/alsa fstype=ext4 Debug 735: file: /usr/share/applications; dirfd: 6; topdir: /usr/share; rel: applications Whitelisting /usr/share/applications 188 162 253:1 /usr/share/applications /usr/share/applications ro,relatime - ext4 /dev/dm-1 rw,discard mountid=188 fsname=/usr/share/applications dir=/usr/share/applications fstype=ext4 Debug 735: file: /usr/share/ca-certificates; dirfd: 6; topdir: /usr/share; rel: ca-certificates Whitelisting /usr/share/ca-certificates 189 162 253:1 /usr/share/ca-certificates /usr/share/ca-certificates ro,relatime - ext4 /dev/dm-1 rw,discard mountid=189 fsname=/usr/share/ca-certificates dir=/usr/share/ca-certificates fstype=ext4 Debug 735: file: /usr/share/cursors; dirfd: 6; topdir: /usr/share; rel: cursors Whitelisting /usr/share/cursors 190 162 253:1 /usr/share/cursors /usr/share/cursors ro,relatime - ext4 /dev/dm-1 rw,discard mountid=190 fsname=/usr/share/cursors dir=/usr/share/cursors fstype=ext4 Debug 735: file: /usr/share/dconf; dirfd: 6; topdir: /usr/share; rel: dconf Whitelisting /usr/share/dconf 191 162 253:1 /usr/share/dconf /usr/share/dconf ro,relatime - ext4 /dev/dm-1 rw,discard mountid=191 fsname=/usr/share/dconf dir=/usr/share/dconf fstype=ext4 Debug 735: file: /usr/share/drirc.d; dirfd: 6; topdir: /usr/share; rel: drirc.d Whitelisting /usr/share/drirc.d 192 162 253:1 /usr/share/drirc.d /usr/share/drirc.d ro,relatime - ext4 /dev/dm-1 rw,discard mountid=192 fsname=/usr/share/drirc.d dir=/usr/share/drirc.d fstype=ext4 Debug 735: file: /usr/share/fonts; dirfd: 6; topdir: /usr/share; rel: fonts Whitelisting /usr/share/fonts 193 162 253:1 /usr/share/fonts /usr/share/fonts ro,relatime - ext4 /dev/dm-1 rw,discard mountid=193 fsname=/usr/share/fonts dir=/usr/share/fonts fstype=ext4 Debug 735: file: /usr/share/gir-1.0; dirfd: 6; topdir: /usr/share; rel: gir-1.0 Whitelisting /usr/share/gir-1.0 194 162 253:1 /usr/share/gir-1.0 /usr/share/gir-1.0 ro,relatime - ext4 /dev/dm-1 rw,discard mountid=194 fsname=/usr/share/gir-1.0 dir=/usr/share/gir-1.0 fstype=ext4 Debug 735: file: /usr/share/gjs-1.0; dirfd: 6; topdir: /usr/share; rel: gjs-1.0 Whitelisting /usr/share/gjs-1.0 195 162 253:1 /usr/share/gjs-1.0 /usr/share/gjs-1.0 ro,relatime - ext4 /dev/dm-1 rw,discard mountid=195 fsname=/usr/share/gjs-1.0 dir=/usr/share/gjs-1.0 fstype=ext4 Debug 735: file: /usr/share/glib-2.0; dirfd: 6; topdir: /usr/share; rel: glib-2.0 Whitelisting /usr/share/glib-2.0 196 162 253:1 /usr/share/glib-2.0 /usr/share/glib-2.0 ro,relatime - ext4 /dev/dm-1 rw,discard mountid=196 fsname=/usr/share/glib-2.0 dir=/usr/share/glib-2.0 fstype=ext4 Debug 735: file: /usr/share/glvnd; dirfd: 6; topdir: /usr/share; rel: glvnd Whitelisting /usr/share/glvnd 197 162 253:1 /usr/share/glvnd /usr/share/glvnd ro,relatime - ext4 /dev/dm-1 rw,discard mountid=197 fsname=/usr/share/glvnd dir=/usr/share/glvnd fstype=ext4 Debug 735: file: /usr/share/gtk-2.0; dirfd: 6; topdir: /usr/share; rel: gtk-2.0 Whitelisting /usr/share/gtk-2.0 198 162 253:1 /usr/share/gtk-2.0 /usr/share/gtk-2.0 ro,relatime - ext4 /dev/dm-1 rw,discard mountid=198 fsname=/usr/share/gtk-2.0 dir=/usr/share/gtk-2.0 fstype=ext4 Debug 735: file: /usr/share/gtk-3.0; dirfd: 6; topdir: /usr/share; rel: gtk-3.0 Whitelisting /usr/share/gtk-3.0 199 162 253:1 /usr/share/gtk-3.0 /usr/share/gtk-3.0 ro,relatime - ext4 /dev/dm-1 rw,discard mountid=199 fsname=/usr/share/gtk-3.0 dir=/usr/share/gtk-3.0 fstype=ext4 Debug 735: file: /usr/share/gtksourceview-3.0; dirfd: 6; topdir: /usr/share; rel: gtksourceview-3.0 Whitelisting /usr/share/gtksourceview-3.0 200 162 253:1 /usr/share/gtksourceview-3.0 /usr/share/gtksourceview-3.0 ro,relatime - ext4 /dev/dm-1 rw,discard mountid=200 fsname=/usr/share/gtksourceview-3.0 dir=/usr/share/gtksourceview-3.0 fstype=ext4 Debug 735: file: /usr/share/gtksourceview-4; dirfd: 6; topdir: /usr/share; rel: gtksourceview-4 Whitelisting /usr/share/gtksourceview-4 201 162 253:1 /usr/share/gtksourceview-4 /usr/share/gtksourceview-4 ro,relatime - ext4 /dev/dm-1 rw,discard mountid=201 fsname=/usr/share/gtksourceview-4 dir=/usr/share/gtksourceview-4 fstype=ext4 Debug 735: file: /usr/share/hunspell; dirfd: 6; topdir: /usr/share; rel: hunspell Whitelisting /usr/share/hunspell 202 162 253:1 /usr/share/hunspell /usr/share/hunspell ro,relatime - ext4 /dev/dm-1 rw,discard mountid=202 fsname=/usr/share/hunspell dir=/usr/share/hunspell fstype=ext4 Debug 735: file: /usr/share/icons; dirfd: 6; topdir: /usr/share; rel: icons Whitelisting /usr/share/icons 203 162 253:1 /usr/share/icons /usr/share/icons ro,relatime - ext4 /dev/dm-1 rw,discard mountid=203 fsname=/usr/share/icons dir=/usr/share/icons fstype=ext4 Debug 735: file: /usr/share/icu; dirfd: 6; topdir: /usr/share; rel: icu Whitelisting /usr/share/icu 204 162 253:1 /usr/share/icu /usr/share/icu ro,relatime - ext4 /dev/dm-1 rw,discard mountid=204 fsname=/usr/share/icu dir=/usr/share/icu fstype=ext4 Debug 735: file: /usr/share/libdrm; dirfd: 6; topdir: /usr/share; rel: libdrm Whitelisting /usr/share/libdrm 205 162 253:1 /usr/share/libdrm /usr/share/libdrm ro,relatime - ext4 /dev/dm-1 rw,discard mountid=205 fsname=/usr/share/libdrm dir=/usr/share/libdrm fstype=ext4 Debug 735: file: /usr/share/locale; dirfd: 6; topdir: /usr/share; rel: locale Whitelisting /usr/share/locale 206 162 253:1 /usr/share/locale /usr/share/locale ro,relatime - ext4 /dev/dm-1 rw,discard mountid=206 fsname=/usr/share/locale dir=/usr/share/locale fstype=ext4 Debug 735: file: /usr/share/mime; dirfd: 6; topdir: /usr/share; rel: mime Whitelisting /usr/share/mime 207 162 253:1 /usr/share/mime /usr/share/mime ro,relatime - ext4 /dev/dm-1 rw,discard mountid=207 fsname=/usr/share/mime dir=/usr/share/mime fstype=ext4 Debug 735: file: /usr/share/misc; dirfd: 6; topdir: /usr/share; rel: misc Whitelisting /usr/share/misc 208 162 253:1 /usr/share/misc /usr/share/misc ro,relatime - ext4 /dev/dm-1 rw,discard mountid=208 fsname=/usr/share/misc dir=/usr/share/misc fstype=ext4 Debug 735: file: /usr/share/myspell; dirfd: 6; topdir: /usr/share; rel: myspell Whitelisting /usr/share/myspell 209 162 253:1 /usr/share/myspell /usr/share/myspell ro,relatime - ext4 /dev/dm-1 rw,discard mountid=209 fsname=/usr/share/myspell dir=/usr/share/myspell fstype=ext4 Debug 735: file: /usr/share/p11-kit; dirfd: 6; topdir: /usr/share; rel: p11-kit Whitelisting /usr/share/p11-kit 210 162 253:1 /usr/share/p11-kit /usr/share/p11-kit ro,relatime - ext4 /dev/dm-1 rw,discard mountid=210 fsname=/usr/share/p11-kit dir=/usr/share/p11-kit fstype=ext4 Debug 735: file: /usr/share/pixmaps; dirfd: 6; topdir: /usr/share; rel: pixmaps Whitelisting /usr/share/pixmaps 211 162 253:1 /usr/share/pixmaps /usr/share/pixmaps ro,relatime - ext4 /dev/dm-1 rw,discard mountid=211 fsname=/usr/share/pixmaps dir=/usr/share/pixmaps fstype=ext4 Debug 735: file: /usr/share/sounds; dirfd: 6; topdir: /usr/share; rel: sounds Whitelisting /usr/share/sounds 212 162 253:1 /usr/share/sounds /usr/share/sounds ro,relatime - ext4 /dev/dm-1 rw,discard mountid=212 fsname=/usr/share/sounds dir=/usr/share/sounds fstype=ext4 Debug 735: file: /usr/share/terminfo; dirfd: 6; topdir: /usr/share; rel: terminfo Whitelisting /usr/share/terminfo 213 162 253:1 /usr/share/terminfo /usr/share/terminfo ro,relatime - ext4 /dev/dm-1 rw,discard mountid=213 fsname=/usr/share/terminfo dir=/usr/share/terminfo fstype=ext4 Debug 735: file: /usr/share/themes; dirfd: 6; topdir: /usr/share; rel: themes Whitelisting /usr/share/themes 214 162 253:1 /usr/share/themes /usr/share/themes ro,relatime - ext4 /dev/dm-1 rw,discard mountid=214 fsname=/usr/share/themes dir=/usr/share/themes fstype=ext4 Debug 735: file: /usr/share/vulkan; dirfd: 6; topdir: /usr/share; rel: vulkan Whitelisting /usr/share/vulkan 215 162 253:1 /usr/share/vulkan /usr/share/vulkan ro,relatime - ext4 /dev/dm-1 rw,discard mountid=215 fsname=/usr/share/vulkan dir=/usr/share/vulkan fstype=ext4 Debug 735: file: /usr/share/X11; dirfd: 6; topdir: /usr/share; rel: X11 Whitelisting /usr/share/X11 216 162 253:1 /usr/share/X11 /usr/share/X11 ro,relatime - ext4 /dev/dm-1 rw,discard mountid=216 fsname=/usr/share/X11 dir=/usr/share/X11 fstype=ext4 Debug 735: file: /usr/share/xml; dirfd: 6; topdir: /usr/share; rel: xml Whitelisting /usr/share/xml 217 162 253:1 /usr/share/xml /usr/share/xml ro,relatime - ext4 /dev/dm-1 rw,discard mountid=217 fsname=/usr/share/xml dir=/usr/share/xml fstype=ext4 Debug 735: file: /usr/share/zenity; dirfd: 6; topdir: /usr/share; rel: zenity Whitelisting /usr/share/zenity 218 162 253:1 /usr/share/zenity /usr/share/zenity ro,relatime - ext4 /dev/dm-1 rw,discard mountid=218 fsname=/usr/share/zenity dir=/usr/share/zenity fstype=ext4 Debug 735: file: /usr/share/zoneinfo; dirfd: 6; topdir: /usr/share; rel: zoneinfo Whitelisting /usr/share/zoneinfo 219 162 253:1 /usr/share/zoneinfo /usr/share/zoneinfo ro,relatime - ext4 /dev/dm-1 rw,discard mountid=219 fsname=/usr/share/zoneinfo dir=/usr/share/zoneinfo fstype=ext4 Debug 735: file: /var/lib/dbus; dirfd: 9; topdir: /var; rel: lib/dbus Whitelisting /var/lib/dbus 220 163 253:2 /lib/dbus /var/lib/dbus ro,nosuid,nodev,noexec,relatime - ext4 /dev/mapper/vg1-var rw,discard mountid=220 fsname=/lib/dbus dir=/var/lib/dbus fstype=ext4 Debug 735: file: /var/cache/fontconfig; dirfd: 9; topdir: /var; rel: cache/fontconfig Whitelisting /var/cache/fontconfig 221 163 253:2 /cache/fontconfig /var/cache/fontconfig ro,nosuid,nodev,noexec,relatime - ext4 /dev/mapper/vg1-var rw,discard mountid=221 fsname=/cache/fontconfig dir=/var/cache/fontconfig fstype=ext4 Debug 735: file: /var/tmp; dirfd: 9; topdir: /var; rel: tmp Whitelisting /var/tmp 222 163 0:39 / /var/tmp rw,nosuid,nodev,noexec - tmpfs tmpfs rw,inode64 mountid=222 fsname=/ dir=/var/tmp fstype=tmpfs Created symbolic link /var/run -> /run Created symbolic link /var/lock -> /run/lock Debug 735: file: /tmp/.X11-unix; dirfd: 10; topdir: /tmp; rel: .X11-unix Whitelisting /tmp/.X11-unix 223 164 0:33 /.X11-unix /tmp/.X11-unix rw,nosuid,nodev,noatime - tmpfs tmpfs rw,size=2097152k,inode64 mountid=223 fsname=/.X11-unix dir=/tmp/.X11-unix fstype=tmpfs Debug 735: file: /run/user/1000/.mutter-Xwaylandauth.D94DD1; dirfd: 8; topdir: /run/user/1000; rel: .mutter-Xwaylandauth.D94DD1 Whitelisting /run/user/1000/.mutter-Xwaylandauth.D94DD1 224 167 0:36 /.mutter-Xwaylandauth.D94DD1 /run/user/1000/.mutter-Xwaylandauth.D94DD1 rw,nosuid,nodev,relatime - tmpfs tmpfs rw,size=6519812k,nr_inodes=1629953,mode=700,uid=1000,gid=1000,inode64 mountid=224 fsname=/.mutter-Xwaylandauth.D94DD1 dir=/run/user/1000/.mutter-Xwaylandauth.D94DD1 fstype=tmpfs Disable /etc/xdg/autostart Mounting read-only /home/user/.config/dconf 226 179 7:0 /user/.config/dconf /home/user/.config/dconf ro,relatime - ext4 /dev/loop0 rw,discard mountid=226 fsname=/user/.config/dconf dir=/home/user/.config/dconf fstype=ext4 Mounting read-only /home/user/.local/share/applications 227 177 7:0 /user/.local/share/applications /home/user/.local/share/applications ro,relatime - ext4 /dev/loop0 rw,discard mountid=227 fsname=/user/.local/share/applications dir=/home/user/.local/share/applications fstype=ext4 Mounting read-only /home/user/.config/mimeapps.list 228 175 7:0 /user/.config/mimeapps.list /home/user/.config/mimeapps.list ro,relatime - ext4 /dev/loop0 rw,discard mountid=228 fsname=/user/.config/mimeapps.list dir=/home/user/.config/mimeapps.list fstype=ext4 Mounting read-only /home/user/.config/user-dirs.dirs 229 176 7:0 /user/.config/user-dirs.dirs /home/user/.config/user-dirs.dirs ro,relatime - ext4 /dev/loop0 rw,discard mountid=229 fsname=/user/.config/user-dirs.dirs dir=/home/user/.config/user-dirs.dirs fstype=ext4 Disable /sbin Disable /usr/local/sbin Disable /usr/sbin Warning (blacklisting): cannot open /usr/local/sbin/at: Permission denied Warning (blacklisting): cannot open /usr/sbin/at: Permission denied Warning (blacklisting): cannot open /sbin/at: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/busybox: Permission denied Warning (blacklisting): cannot open /usr/sbin/busybox: Permission denied Warning (blacklisting): cannot open /sbin/busybox: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/chage: Permission denied Warning (blacklisting): cannot open /usr/sbin/chage: Permission denied Disable /usr/bin/chage Warning (blacklisting): cannot open /sbin/chage: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/chfn: Permission denied Warning (blacklisting): cannot open /usr/sbin/chfn: Permission denied Disable /usr/bin/chfn Warning (blacklisting): cannot open /sbin/chfn: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/chsh: Permission denied Warning (blacklisting): cannot open /usr/sbin/chsh: Permission denied Disable /usr/bin/chsh Warning (blacklisting): cannot open /sbin/chsh: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/crontab: Permission denied Warning (blacklisting): cannot open /usr/sbin/crontab: Permission denied Warning (blacklisting): cannot open /sbin/crontab: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/evtest: Permission denied Warning (blacklisting): cannot open /usr/sbin/evtest: Permission denied Warning (blacklisting): cannot open /sbin/evtest: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/expiry: Permission denied Warning (blacklisting): cannot open /usr/sbin/expiry: Permission denied Disable /usr/bin/expiry Warning (blacklisting): cannot open /sbin/expiry: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/fusermount: Permission denied Warning (blacklisting): cannot open /usr/sbin/fusermount: Permission denied Disable /usr/bin/fusermount Warning (blacklisting): cannot open /sbin/fusermount: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/gksu: Permission denied Warning (blacklisting): cannot open /usr/sbin/gksu: Permission denied Warning (blacklisting): cannot open /sbin/gksu: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/gksudo: Permission denied Warning (blacklisting): cannot open /usr/sbin/gksudo: Permission denied Warning (blacklisting): cannot open /sbin/gksudo: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/gpasswd: Permission denied Warning (blacklisting): cannot open /usr/sbin/gpasswd: Permission denied Disable /usr/bin/gpasswd Warning (blacklisting): cannot open /sbin/gpasswd: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/kdesudo: Permission denied Warning (blacklisting): cannot open /usr/sbin/kdesudo: Permission denied Warning (blacklisting): cannot open /sbin/kdesudo: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/ksu: Permission denied Warning (blacklisting): cannot open /usr/sbin/ksu: Permission denied Warning (blacklisting): cannot open /sbin/ksu: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/mount: Permission denied Warning (blacklisting): cannot open /usr/sbin/mount: Permission denied Warning (blacklisting): cannot open /sbin/mount: Permission denied Disable /bin/mount Warning (blacklisting): cannot open /usr/local/sbin/mount.ecryptfs_private: Permission denied Warning (blacklisting): cannot open /usr/sbin/mount.ecryptfs_private: Permission denied Warning (blacklisting): cannot open /sbin/mount.ecryptfs_private: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/nc: Permission denied Warning (blacklisting): cannot open /usr/sbin/nc: Permission denied Disable /usr/bin/nc Warning (blacklisting): cannot open /sbin/nc: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/ncat: Permission denied Warning (blacklisting): cannot open /usr/sbin/ncat: Permission denied Warning (blacklisting): cannot open /sbin/ncat: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/nmap: Permission denied Warning (blacklisting): cannot open /usr/sbin/nmap: Permission denied Warning (blacklisting): cannot open /sbin/nmap: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/newgidmap: Permission denied Warning (blacklisting): cannot open /usr/sbin/newgidmap: Permission denied Disable /usr/bin/newgidmap Warning (blacklisting): cannot open /sbin/newgidmap: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/newgrp: Permission denied Warning (blacklisting): cannot open /usr/sbin/newgrp: Permission denied Disable /usr/bin/newgrp Warning (blacklisting): cannot open /sbin/newgrp: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/newuidmap: Permission denied Warning (blacklisting): cannot open /usr/sbin/newuidmap: Permission denied Disable /usr/bin/newuidmap Warning (blacklisting): cannot open /sbin/newuidmap: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/ntfs-3g: Permission denied Warning (blacklisting): cannot open /usr/sbin/ntfs-3g: Permission denied Warning (blacklisting): cannot open /sbin/ntfs-3g: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/pkexec: Permission denied Warning (blacklisting): cannot open /usr/sbin/pkexec: Permission denied Disable /usr/bin/pkexec Warning (blacklisting): cannot open /sbin/pkexec: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/procmail: Permission denied Warning (blacklisting): cannot open /usr/sbin/procmail: Permission denied Warning (blacklisting): cannot open /sbin/procmail: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/sg: Permission denied Warning (blacklisting): cannot open /usr/sbin/sg: Permission denied Disable /usr/bin/newgrp (requested /usr/bin/sg) Warning (blacklisting): cannot open /sbin/sg: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/strace: Permission denied Warning (blacklisting): cannot open /usr/sbin/strace: Permission denied Disable /usr/bin/strace Warning (blacklisting): cannot open /sbin/strace: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/su: Permission denied Warning (blacklisting): cannot open /usr/sbin/su: Permission denied Warning (blacklisting): cannot open /sbin/su: Permission denied Disable /bin/su Warning (blacklisting): cannot open /usr/local/sbin/sudo: Permission denied Warning (blacklisting): cannot open /usr/sbin/sudo: Permission denied Disable /usr/bin/sudo Warning (blacklisting): cannot open /sbin/sudo: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/tcpdump: Permission denied Warning (blacklisting): cannot open /usr/sbin/tcpdump: Permission denied Warning (blacklisting): cannot open /sbin/tcpdump: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/umount: Permission denied Warning (blacklisting): cannot open /usr/sbin/umount: Permission denied Warning (blacklisting): cannot open /sbin/umount: Permission denied Disable /bin/umount Warning (blacklisting): cannot open /usr/local/sbin/unix_chkpwd: Permission denied Warning (blacklisting): cannot open /usr/sbin/unix_chkpwd: Permission denied Warning (blacklisting): cannot open /sbin/unix_chkpwd: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/xev: Permission denied Warning (blacklisting): cannot open /usr/sbin/xev: Permission denied Warning (blacklisting): cannot open /sbin/xev: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/xinput: Permission denied Warning (blacklisting): cannot open /usr/sbin/xinput: Permission denied Warning (blacklisting): cannot open /sbin/xinput: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/lxterminal: Permission denied Warning (blacklisting): cannot open /usr/sbin/lxterminal: Permission denied Warning (blacklisting): cannot open /sbin/lxterminal: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/gnome-terminal: Permission denied Warning (blacklisting): cannot open /usr/sbin/gnome-terminal: Permission denied Disable /usr/bin/gnome-terminal Warning (blacklisting): cannot open /sbin/gnome-terminal: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/gnome-terminal.wrapper: Permission denied Warning (blacklisting): cannot open /usr/sbin/gnome-terminal.wrapper: Permission denied Warning (blacklisting): cannot open /sbin/gnome-terminal.wrapper: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/lilyterm: Permission denied Warning (blacklisting): cannot open /usr/sbin/lilyterm: Permission denied Warning (blacklisting): cannot open /sbin/lilyterm: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/mate-terminal: Permission denied Warning (blacklisting): cannot open /usr/sbin/mate-terminal: Permission denied Warning (blacklisting): cannot open /sbin/mate-terminal: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/mate-terminal.wrapper: Permission denied Warning (blacklisting): cannot open /usr/sbin/mate-terminal.wrapper: Permission denied Warning (blacklisting): cannot open /sbin/mate-terminal.wrapper: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/pantheon-terminal: Permission denied Warning (blacklisting): cannot open /usr/sbin/pantheon-terminal: Permission denied Warning (blacklisting): cannot open /sbin/pantheon-terminal: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/roxterm: Permission denied Warning (blacklisting): cannot open /usr/sbin/roxterm: Permission denied Warning (blacklisting): cannot open /sbin/roxterm: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/roxterm-config: Permission denied Warning (blacklisting): cannot open /usr/sbin/roxterm-config: Permission denied Warning (blacklisting): cannot open /sbin/roxterm-config: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/terminix: Permission denied Warning (blacklisting): cannot open /usr/sbin/terminix: Permission denied Warning (blacklisting): cannot open /sbin/terminix: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/tilix: Permission denied Warning (blacklisting): cannot open /usr/sbin/tilix: Permission denied Warning (blacklisting): cannot open /sbin/tilix: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/urxvtc: Permission denied Warning (blacklisting): cannot open /usr/sbin/urxvtc: Permission denied Warning (blacklisting): cannot open /sbin/urxvtc: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/urxvtcd: Permission denied Warning (blacklisting): cannot open /usr/sbin/urxvtcd: Permission denied Warning (blacklisting): cannot open /sbin/urxvtcd: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/xfce4-terminal: Permission denied Warning (blacklisting): cannot open /usr/sbin/xfce4-terminal: Permission denied Warning (blacklisting): cannot open /sbin/xfce4-terminal: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/xfce4-terminal.wrapper: Permission denied Warning (blacklisting): cannot open /usr/sbin/xfce4-terminal.wrapper: Permission denied Warning (blacklisting): cannot open /sbin/xfce4-terminal.wrapper: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/bwrap: Permission denied Warning (blacklisting): cannot open /usr/sbin/bwrap: Permission denied Disable /usr/bin/bwrap Warning (blacklisting): cannot open /sbin/bwrap: Permission denied Disable /proc/config.gz Warning (blacklisting): cannot open /usr/local/sbin/dig: Permission denied Warning (blacklisting): cannot open /usr/sbin/dig: Permission denied Warning (blacklisting): cannot open /sbin/dig: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/dlint: Permission denied Warning (blacklisting): cannot open /usr/sbin/dlint: Permission denied Warning (blacklisting): cannot open /sbin/dlint: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/dns2tcp: Permission denied Warning (blacklisting): cannot open /usr/sbin/dns2tcp: Permission denied Warning (blacklisting): cannot open /sbin/dns2tcp: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/dnssec-*: Permission denied Warning (blacklisting): cannot open /usr/sbin/dnssec-*: Permission denied Warning (blacklisting): cannot open /sbin/dnssec-*: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/dnswalk: Permission denied Warning (blacklisting): cannot open /usr/sbin/dnswalk: Permission denied Warning (blacklisting): cannot open /sbin/dnswalk: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/drill: Permission denied Warning (blacklisting): cannot open /usr/sbin/drill: Permission denied Warning (blacklisting): cannot open /sbin/drill: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/host: Permission denied Warning (blacklisting): cannot open /usr/sbin/host: Permission denied Warning (blacklisting): cannot open /sbin/host: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/iodine: Permission denied Warning (blacklisting): cannot open /usr/sbin/iodine: Permission denied Warning (blacklisting): cannot open /sbin/iodine: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/kdig: Permission denied Warning (blacklisting): cannot open /usr/sbin/kdig: Permission denied Warning (blacklisting): cannot open /sbin/kdig: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/khost: Permission denied Warning (blacklisting): cannot open /usr/sbin/khost: Permission denied Warning (blacklisting): cannot open /sbin/khost: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/knsupdate: Permission denied Warning (blacklisting): cannot open /usr/sbin/knsupdate: Permission denied Warning (blacklisting): cannot open /sbin/knsupdate: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/ldns-*: Permission denied Warning (blacklisting): cannot open /usr/sbin/ldns-*: Permission denied Warning (blacklisting): cannot open /sbin/ldns-*: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/ldnsd: Permission denied Warning (blacklisting): cannot open /usr/sbin/ldnsd: Permission denied Warning (blacklisting): cannot open /sbin/ldnsd: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/nslookup: Permission denied Warning (blacklisting): cannot open /usr/sbin/nslookup: Permission denied Warning (blacklisting): cannot open /sbin/nslookup: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/resolvectl: Permission denied Warning (blacklisting): cannot open /usr/sbin/resolvectl: Permission denied Warning (blacklisting): cannot open /sbin/resolvectl: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/unbound-host: Permission denied Warning (blacklisting): cannot open /usr/sbin/unbound-host: Permission denied Warning (blacklisting): cannot open /sbin/unbound-host: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/clang*: Permission denied Warning (blacklisting): cannot open /usr/sbin/clang*: Permission denied Warning (blacklisting): cannot open /sbin/clang*: Permission denied Disable /usr/lib/llvm/13/bin/clang-13 (requested /usr/lib/llvm/13/bin/clang++-13) Disable /usr/lib/llvm/13/bin/clang-include-fixer Disable /usr/lib/llvm/13/bin/clang-move Disable /usr/lib/llvm/13/bin/clang-refactor Disable /usr/lib/llvm/13/bin/clang-13 (requested /usr/lib/llvm/13/bin/clang) Disable /usr/lib/llvm/13/bin/clang-reorder-fields Disable /usr/lib/llvm/13/bin/clang-rename Disable /usr/lib/llvm/13/bin/clang-13 (requested /usr/lib/llvm/13/bin/clang-cpp-13) Disable /usr/lib/llvm/13/bin/clang-offload-bundler Disable /usr/lib/llvm/13/bin/clang-13 (requested /usr/lib/llvm/13/bin/clang-cpp) Disable /usr/lib/llvm/13/bin/clang-13 (requested /usr/lib/llvm/13/bin/clang++) Disable /usr/lib/llvm/13/bin/clang-extdef-mapping Disable /usr/lib/llvm/13/bin/clang-offload-wrapper Disable /usr/lib/llvm/13/bin/clang-13 (requested /usr/lib/llvm/13/bin/clang-cl) Disable /usr/lib/llvm/13/bin/clang-13 (requested /usr/lib/llvm/13/bin/clang-cl-13) Disable /usr/lib/llvm/13/bin/clang-change-namespace Disable /usr/lib/llvm/13/bin/clang-scan-deps Disable /usr/lib/llvm/13/bin/clang-doc Disable /usr/lib/llvm/13/bin/clang-tidy Disable /usr/lib/llvm/13/bin/clang-query Disable /usr/lib/llvm/13/bin/clangd Disable /usr/lib/llvm/13/bin/clang-format Disable /usr/lib/llvm/13/bin/clang-13 Disable /usr/lib/llvm/13/bin/clang-apply-replacements Disable /usr/lib/llvm/13/bin/clang-check Warning (blacklisting): cannot open /usr/local/sbin/lldb*: Permission denied Warning (blacklisting): cannot open /usr/sbin/lldb*: Permission denied Warning (blacklisting): cannot open /sbin/lldb*: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/llvm*: Permission denied Warning (blacklisting): cannot open /usr/sbin/llvm*: Permission denied Warning (blacklisting): cannot open /sbin/llvm*: Permission denied Disable /usr/lib/llvm/13/bin/llvm-profgen Disable /usr/lib/llvm/13/bin/llvm-rc (requested /usr/lib/llvm/13/bin/llvm-windres) Disable /usr/lib/llvm/13/bin/llvm-readobj (requested /usr/lib/llvm/13/bin/llvm-readelf) Disable /usr/lib/llvm/13/bin/llvm-opt-report Disable /usr/lib/llvm/13/bin/llvm-ar (requested /usr/lib/llvm/13/bin/llvm-lib) Disable /usr/lib/llvm/13/bin/llvm-profdata Disable /usr/lib/llvm/13/bin/llvm-symbolizer (requested /usr/lib/llvm/13/bin/llvm-addr2line) Disable /usr/lib/llvm/13/bin/llvm-bcanalyzer Disable /usr/lib/llvm/13/bin/llvm-mc Disable /usr/lib/llvm/13/bin/llvm-objcopy (requested /usr/lib/llvm/13/bin/llvm-strip) Disable /usr/lib/llvm/13/bin/llvm-as Disable /usr/lib/llvm/13/bin/llvm-link Disable /usr/lib/llvm/13/bin/llvm-cfi-verify Disable /usr/lib/llvm/13/bin/llvm-tapi-diff Disable /usr/lib/llvm/13/bin/llvm-libtool-darwin Disable /usr/lib/llvm/13/bin/llvm-nm Disable /usr/lib/llvm/13/bin/llvm-tblgen Disable /usr/lib/llvm/13/bin/llvm-mca Disable /usr/lib/llvm/13/bin/llvm-diff Disable /usr/lib/llvm/13/bin/llvm-dwp Disable /usr/lib/llvm/13/bin/llvm-undname Disable /usr/lib/llvm/13/bin/llvm-rc Disable /usr/lib/llvm/13/bin/llvm-cxxdump Disable /usr/lib/llvm/13/bin/llvm-ar (requested /usr/lib/llvm/13/bin/llvm-dlltool) Disable /usr/lib/llvm/13/bin/llvm-modextract Disable /usr/lib/llvm/13/bin/llvm-objcopy (requested /usr/lib/llvm/13/bin/llvm-install-name-tool) Disable /usr/lib/llvm/13/bin/llvm-strings Disable /usr/lib/llvm/13/bin/llvm-exegesis Disable /usr/lib/llvm/13/bin/llvm-rtdyld Disable /usr/lib/llvm/13/bin/llvm-pdbutil Disable /usr/lib/llvm/13/bin/llvm-lipo Disable /usr/lib/llvm/13/bin/llvm-symbolizer Disable /usr/lib/llvm/13/bin/llvm-c-test Disable /usr/lib/llvm/13/bin/llvm-lto2 Disable /usr/lib/llvm/13/bin/llvm-ifs Disable /usr/lib/llvm/13/bin/llvm-reduce Disable /usr/lib/llvm/13/bin/llvm-sim Disable /usr/lib/llvm/13/bin/llvm-lto Disable /usr/lib/llvm/13/bin/llvm-size Disable /usr/lib/llvm/13/bin/llvm-cat Disable /usr/lib/llvm/13/bin/llvm-dwarfdump Disable /usr/lib/llvm/13/bin/llvm-objdump (requested /usr/lib/llvm/13/bin/llvm-otool) Disable /usr/lib/llvm/13/bin/llvm-extract Disable /usr/lib/llvm/13/bin/llvm-ar (requested /usr/lib/llvm/13/bin/llvm-ranlib) Disable /usr/lib/llvm/13/bin/llvm-xray Disable /usr/lib/llvm/13/bin/llvm-jitlink-executor Disable /usr/lib/llvm/13/bin/llvm-objcopy Disable /usr/lib/llvm/13/bin/x86_64-pc-linux-gnu-llvm-config (requested /usr/lib/llvm/13/bin/llvm-config) Disable /usr/lib/llvm/13/bin/llvm-PerfectShuffle Disable /usr/lib/llvm/13/bin/llvm-objcopy (requested /usr/lib/llvm/13/bin/llvm-bitcode-strip) Disable /usr/lib/llvm/13/bin/llvm-cvtres Disable /usr/lib/llvm/13/bin/llvm-cxxfilt Disable /usr/lib/llvm/13/bin/llvm-mt Disable /usr/lib/llvm/13/bin/llvm-ar Disable /usr/lib/llvm/13/bin/llvm-objdump Disable /usr/lib/llvm/13/bin/llvm-cov Disable /usr/lib/llvm/13/bin/llvm-cxxmap Disable /usr/lib/llvm/13/bin/llvm-jitlink Disable /usr/lib/llvm/13/bin/llvm-readobj Disable /usr/lib/llvm/13/bin/llvm-dis Disable /usr/lib/llvm/13/bin/llvm-ml Disable /usr/lib/llvm/13/bin/llvm-split Disable /usr/lib/llvm/13/bin/llvm-stress Disable /usr/lib/llvm/13/bin/llvm-gsymutil Warning (blacklisting): cannot open /usr/local/sbin/as: Permission denied Warning (blacklisting): cannot open /usr/sbin/as: Permission denied Disable /usr/x86_64-pc-linux-gnu/binutils-bin/2.37_p1/as (requested /usr/bin/as) Warning (blacklisting): cannot open /sbin/as: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/cc: Permission denied Warning (blacklisting): cannot open /usr/sbin/cc: Permission denied Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/x86_64-pc-linux-gnu-gcc (requested /usr/bin/cc) Warning (blacklisting): cannot open /sbin/cc: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/c++*: Permission denied Warning (blacklisting): cannot open /usr/sbin/c++*: Permission denied Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/x86_64-pc-linux-gnu-c++ (requested /usr/bin/c++) Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/x86_64-pc-linux-gnu-c++ (requested /usr/bin/c++-11.2.0) Disable /usr/x86_64-pc-linux-gnu/binutils-bin/2.37_p1/c++filt (requested /usr/bin/c++filt) Warning (blacklisting): cannot open /sbin/c++*: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/c8*: Permission denied Warning (blacklisting): cannot open /usr/sbin/c8*: Permission denied Disable /usr/bin/c89 Warning (blacklisting): cannot open /sbin/c8*: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/c9*: Permission denied Warning (blacklisting): cannot open /usr/sbin/c9*: Permission denied Disable /usr/bin/c99 Warning (blacklisting): cannot open /sbin/c9*: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/cpp*: Permission denied Warning (blacklisting): cannot open /usr/sbin/cpp*: Permission denied Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/x86_64-pc-linux-gnu-cpp (requested /usr/bin/cpp) Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/x86_64-pc-linux-gnu-cpp (requested /usr/bin/cpp-11.2.0) Disable /usr/bin/cpp2html Warning (blacklisting): cannot open /sbin/cpp*: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/g++*: Permission denied Warning (blacklisting): cannot open /usr/sbin/g++*: Permission denied Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/x86_64-pc-linux-gnu-g++ (requested /usr/bin/g++-11.2.0) Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/x86_64-pc-linux-gnu-g++ (requested /usr/bin/g++) Warning (blacklisting): cannot open /sbin/g++*: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/gcc*: Permission denied Warning (blacklisting): cannot open /usr/sbin/gcc*: Permission denied Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/gcc-nm (requested /usr/bin/gcc-nm) Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/gcc-ar (requested /usr/bin/gcc-ar) Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/x86_64-pc-linux-gnu-gcc (requested /usr/bin/gcc) Disable /usr/bin/gcc-config Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/x86_64-pc-linux-gnu-gcc (requested /usr/bin/gcc-11.2.0) Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/gcc-ranlib (requested /usr/bin/gcc-ranlib) Warning (blacklisting): cannot open /sbin/gcc*: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/gdb: Permission denied Warning (blacklisting): cannot open /usr/sbin/gdb: Permission denied Disable /usr/bin/gdb Warning (blacklisting): cannot open /sbin/gdb: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/ld: Permission denied Warning (blacklisting): cannot open /usr/sbin/ld: Permission denied Disable /usr/x86_64-pc-linux-gnu/binutils-bin/2.37_p1/ld (requested /usr/bin/ld) Warning (blacklisting): cannot open /sbin/ld: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/*-gcc*: Permission denied Warning (blacklisting): cannot open /usr/sbin/*-gcc*: Permission denied Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/x86_64-pc-linux-gnu-gcc (requested /usr/bin/x86_64-pc-linux-gnu-gcc-11.2.0) Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/x86_64-pc-linux-gnu-gcc-nm (requested /usr/bin/x86_64-pc-linux-gnu-gcc-nm) Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/x86_64-pc-linux-gnu-gcc-ar (requested /usr/bin/x86_64-pc-linux-gnu-gcc-ar) Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/x86_64-pc-linux-gnu-gcc (requested /usr/bin/x86_64-pc-linux-gnu-gcc) Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/x86_64-pc-linux-gnu-gcc-ranlib (requested /usr/bin/x86_64-pc-linux-gnu-gcc-ranlib) Warning (blacklisting): cannot open /sbin/*-gcc*: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/*-g++*: Permission denied Warning (blacklisting): cannot open /usr/sbin/*-g++*: Permission denied Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/x86_64-pc-linux-gnu-g++ (requested /usr/bin/x86_64-pc-linux-gnu-g++-11.2.0) Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/x86_64-pc-linux-gnu-g++ (requested /usr/bin/x86_64-pc-linux-gnu-g++) Warning (blacklisting): cannot open /sbin/*-g++*: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/*-gcc*: Permission denied Warning (blacklisting): cannot open /usr/sbin/*-gcc*: Permission denied Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/x86_64-pc-linux-gnu-gcc (requested /usr/bin/x86_64-pc-linux-gnu-gcc-11.2.0) Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/x86_64-pc-linux-gnu-gcc-nm (requested /usr/bin/x86_64-pc-linux-gnu-gcc-nm) Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/x86_64-pc-linux-gnu-gcc-ar (requested /usr/bin/x86_64-pc-linux-gnu-gcc-ar) Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/x86_64-pc-linux-gnu-gcc (requested /usr/bin/x86_64-pc-linux-gnu-gcc) Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/x86_64-pc-linux-gnu-gcc-ranlib (requested /usr/bin/x86_64-pc-linux-gnu-gcc-ranlib) Warning (blacklisting): cannot open /sbin/*-gcc*: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/*-g++*: Permission denied Warning (blacklisting): cannot open /usr/sbin/*-g++*: Permission denied Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/x86_64-pc-linux-gnu-g++ (requested /usr/bin/x86_64-pc-linux-gnu-g++-11.2.0) Disable /usr/x86_64-pc-linux-gnu/gcc-bin/11.2.0/x86_64-pc-linux-gnu-g++ (requested /usr/bin/x86_64-pc-linux-gnu-g++) Warning (blacklisting): cannot open /sbin/*-g++*: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/gccgo: Permission denied Warning (blacklisting): cannot open /usr/sbin/gccgo: Permission denied Warning (blacklisting): cannot open /sbin/gccgo: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/go: Permission denied Warning (blacklisting): cannot open /usr/sbin/go: Permission denied Disable /usr/lib/go/bin/go (requested /usr/bin/go) Warning (blacklisting): cannot open /sbin/go: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/gofmt: Permission denied Warning (blacklisting): cannot open /usr/sbin/gofmt: Permission denied Disable /usr/lib/go/bin/gofmt (requested /usr/bin/gofmt) Warning (blacklisting): cannot open /sbin/gofmt: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/java: Permission denied Warning (blacklisting): cannot open /usr/sbin/java: Permission denied Warning (blacklisting): cannot open /sbin/java: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/javac: Permission denied Warning (blacklisting): cannot open /usr/sbin/javac: Permission denied Warning (blacklisting): cannot open /sbin/javac: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/openssl: Permission denied Warning (blacklisting): cannot open /usr/sbin/openssl: Permission denied Disable /usr/bin/openssl Warning (blacklisting): cannot open /sbin/openssl: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/openssl-1.0: Permission denied Warning (blacklisting): cannot open /usr/sbin/openssl-1.0: Permission denied Warning (blacklisting): cannot open /sbin/openssl-1.0: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/rust-gdb: Permission denied Warning (blacklisting): cannot open /usr/sbin/rust-gdb: Permission denied Disable /usr/lib/rust/1.56.1/bin/rust-gdb-1.56.1 (requested /usr/bin/rust-gdb) Warning (blacklisting): cannot open /sbin/rust-gdb: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/rust-lldb: Permission denied Warning (blacklisting): cannot open /usr/sbin/rust-lldb: Permission denied Disable /usr/lib/rust/1.56.1/bin/rust-lldb-1.56.1 (requested /usr/bin/rust-lldb) Warning (blacklisting): cannot open /sbin/rust-lldb: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/rustc: Permission denied Warning (blacklisting): cannot open /usr/sbin/rustc: Permission denied Disable /usr/lib/rust/1.56.1/bin/rustc-1.56.1 (requested /usr/bin/rustc) Warning (blacklisting): cannot open /sbin/rustc: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/tcc: Permission denied Warning (blacklisting): cannot open /usr/sbin/tcc: Permission denied Warning (blacklisting): cannot open /sbin/tcc: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/x86_64-tcc: Permission denied Warning (blacklisting): cannot open /usr/sbin/x86_64-tcc: Permission denied Warning (blacklisting): cannot open /sbin/x86_64-tcc: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/valgrind*: Permission denied Warning (blacklisting): cannot open /usr/sbin/valgrind*: Permission denied Warning (blacklisting): cannot open /sbin/valgrind*: Permission denied Disable /usr/src Disable /usr/include Mounting noexec /home/user/Pictures 384 168 7:0 /user/Pictures /home/user/Pictures rw,nosuid,nodev,noexec,relatime - ext4 /dev/loop0 rw,discard mountid=384 fsname=/user/Pictures dir=/home/user/Pictures fstype=ext4 Mounting noexec /home/user/Videos 385 169 7:0 /user/Videos /home/user/Videos rw,nosuid,nodev,noexec,relatime - ext4 /dev/loop0 rw,discard mountid=385 fsname=/user/Videos dir=/home/user/Videos fstype=ext4 Mounting noexec /home/user/.TelegramDesktop 386 171 7:0 /user/.TelegramDesktop /home/user/.TelegramDesktop rw,nosuid,nodev,noexec,relatime - ext4 /dev/loop0 rw,discard mountid=386 fsname=/user/.TelegramDesktop dir=/home/user/.TelegramDesktop fstype=ext4 Mounting noexec /home/user/.local/share/TelegramDesktop 387 172 7:0 /user/.local/share/TelegramDesktop /home/user/.local/share/TelegramDesktop rw,nosuid,nodev,noexec,relatime - ext4 /dev/loop0 rw,discard mountid=387 fsname=/user/.local/share/TelegramDesktop dir=/home/user/.local/share/TelegramDesktop fstype=ext4 Mounting noexec /home/user/Downloads 388 173 7:0 /user/Downloads /home/user/Downloads rw,nosuid,nodev,noexec,relatime - ext4 /dev/loop0 rw,discard mountid=388 fsname=/user/Downloads dir=/home/user/Downloads fstype=ext4 Mounting noexec /home/user/.config/ibus 389 174 7:0 /user/.config/ibus /home/user/.config/ibus rw,nosuid,nodev,noexec,relatime - ext4 /dev/loop0 rw,discard mountid=389 fsname=/user/.config/ibus dir=/home/user/.config/ibus fstype=ext4 Mounting noexec /home/user/.config/mimeapps.list 390 228 7:0 /user/.config/mimeapps.list /home/user/.config/mimeapps.list ro,nosuid,nodev,noexec,relatime - ext4 /dev/loop0 rw,discard mountid=390 fsname=/user/.config/mimeapps.list dir=/home/user/.config/mimeapps.list fstype=ext4 Mounting noexec /home/user/.config/user-dirs.dirs 391 229 7:0 /user/.config/user-dirs.dirs /home/user/.config/user-dirs.dirs ro,nosuid,nodev,noexec,relatime - ext4 /dev/loop0 rw,discard mountid=391 fsname=/user/.config/user-dirs.dirs dir=/home/user/.config/user-dirs.dirs fstype=ext4 Mounting noexec /home/user/.local/share/applications 392 227 7:0 /user/.local/share/applications /home/user/.local/share/applications ro,nosuid,nodev,noexec,relatime - ext4 /dev/loop0 rw,discard mountid=392 fsname=/user/.local/share/applications dir=/home/user/.local/share/applications fstype=ext4 Mounting noexec /home/user/.local/share/icons 393 178 7:0 /user/.local/share/icons /home/user/.local/share/icons rw,nosuid,nodev,noexec,relatime - ext4 /dev/loop0 rw,discard mountid=393 fsname=/user/.local/share/icons dir=/home/user/.local/share/icons fstype=ext4 Mounting noexec /home/user/.config/dconf 394 226 7:0 /user/.config/dconf /home/user/.config/dconf ro,nosuid,nodev,noexec,relatime - ext4 /dev/loop0 rw,discard mountid=394 fsname=/user/.config/dconf dir=/home/user/.config/dconf fstype=ext4 Mounting noexec /home/user/.cache/fontconfig 395 180 7:0 /user/.cache/fontconfig /home/user/.cache/fontconfig rw,nosuid,nodev,noexec,relatime - ext4 /dev/loop0 rw,discard mountid=395 fsname=/user/.cache/fontconfig dir=/home/user/.cache/fontconfig fstype=ext4 Mounting noexec /home/user/.config/gtk-3.0 396 181 7:0 /user/.config/gtk-3.0 /home/user/.config/gtk-3.0 rw,nosuid,nodev,noexec,relatime - ext4 /dev/loop0 rw,discard mountid=396 fsname=/user/.config/gtk-3.0 dir=/home/user/.config/gtk-3.0 fstype=ext4 Mounting noexec /home/user/.config/gtk-4.0 397 182 7:0 /user/.config/gtk-4.0 /home/user/.config/gtk-4.0 rw,nosuid,nodev,noexec,relatime - ext4 /dev/loop0 rw,discard mountid=397 fsname=/user/.config/gtk-4.0 dir=/home/user/.config/gtk-4.0 fstype=ext4 Mounting noexec /run/user/1000 403 398 0:36 /.mutter-Xwaylandauth.D94DD1 /run/user/1000/.mutter-Xwaylandauth.D94DD1 rw,nosuid,nodev,relatime - tmpfs tmpfs rw,size=6519812k,nr_inodes=1629953,mode=700,uid=1000,gid=1000,inode64 mountid=403 fsname=/.mutter-Xwaylandauth.D94DD1 dir=/run/user/1000/.mutter-Xwaylandauth.D94DD1 fstype=tmpfs Mounting noexec /run/user/1000/dconf 404 399 0:36 /dconf /run/user/1000/dconf rw,nosuid,nodev,noexec,relatime - tmpfs tmpfs rw,size=6519812k,nr_inodes=1629953,mode=700,uid=1000,gid=1000,inode64 mountid=404 fsname=/dconf dir=/run/user/1000/dconf fstype=tmpfs Mounting noexec /run/user/1000/ICEauthority 405 400 0:36 /ICEauthority /run/user/1000/ICEauthority rw,nosuid,nodev,noexec,relatime - tmpfs tmpfs rw,size=6519812k,nr_inodes=1629953,mode=700,uid=1000,gid=1000,inode64 mountid=405 fsname=/ICEauthority dir=/run/user/1000/ICEauthority fstype=tmpfs Mounting noexec /run/user/1000/pulse/native 406 401 0:36 /pulse/native /run/user/1000/pulse/native rw,nosuid,nodev,noexec,relatime - tmpfs tmpfs rw,size=6519812k,nr_inodes=1629953,mode=700,uid=1000,gid=1000,inode64 mountid=406 fsname=/pulse/native dir=/run/user/1000/pulse/native fstype=tmpfs Mounting noexec /run/user/1000/wayland-0 407 402 0:36 /wayland-0 /run/user/1000/wayland-0 rw,nosuid,nodev,noexec,relatime - tmpfs tmpfs rw,size=6519812k,nr_inodes=1629953,mode=700,uid=1000,gid=1000,inode64 mountid=407 fsname=/wayland-0 dir=/run/user/1000/wayland-0 fstype=tmpfs Mounting noexec /run/user/1000/.mutter-Xwaylandauth.D94DD1 408 403 0:36 /.mutter-Xwaylandauth.D94DD1 /run/user/1000/.mutter-Xwaylandauth.D94DD1 rw,nosuid,nodev,noexec,relatime - tmpfs tmpfs rw,size=6519812k,nr_inodes=1629953,mode=700,uid=1000,gid=1000,inode64 mountid=408 fsname=/.mutter-Xwaylandauth.D94DD1 dir=/run/user/1000/.mutter-Xwaylandauth.D94DD1 fstype=tmpfs Mounting noexec /dev/shm 409 129 0:43 /shm /dev/shm rw,nosuid,nodev,noexec - tmpfs tmpfs rw,mode=755,inode64 mountid=409 fsname=/shm dir=/dev/shm fstype=tmpfs Mounting noexec /tmp 411 410 0:33 /.X11-unix /tmp/.X11-unix rw,nosuid,nodev,noatime - tmpfs tmpfs rw,size=2097152k,inode64 mountid=411 fsname=/.X11-unix dir=/tmp/.X11-unix fstype=tmpfs Mounting noexec /tmp/.X11-unix 412 411 0:33 /.X11-unix /tmp/.X11-unix rw,nosuid,nodev,noexec,noatime - tmpfs tmpfs rw,size=2097152k,inode64 mountid=412 fsname=/.X11-unix dir=/tmp/.X11-unix fstype=tmpfs Warning (blacklisting): cannot open /usr/local/sbin/gjs: Permission denied Warning (blacklisting): cannot open /usr/sbin/gjs: Permission denied Disable /usr/bin/gjs-console (requested /usr/bin/gjs) Warning (blacklisting): cannot open /sbin/gjs: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/gjs-console: Permission denied Warning (blacklisting): cannot open /usr/sbin/gjs-console: Permission denied Disable /usr/bin/gjs-console Warning (blacklisting): cannot open /sbin/gjs-console: Permission denied Disable /usr/lib64/gjs Disable /usr/lib64/libgjs.so.0.0.0 Disable /usr/lib64/libgjs.so.0.0.0 (requested /usr/lib64/libgjs.so.0) Disable /usr/lib64/libgjs.so.0.0.0 (requested /usr/lib64/libgjs.so) Warning (blacklisting): cannot open /usr/local/sbin/lua*: Permission denied Warning (blacklisting): cannot open /usr/sbin/lua*: Permission denied Disable /usr/bin/luac5.1 (requested /usr/bin/luac) Disable /usr/bin/lua5.4 Disable /usr/bin/lua5.1 Disable /usr/bin/lua5.1 (requested /usr/bin/lua) Disable /usr/bin/luac5.1 Disable /usr/bin/luac5.4 Warning (blacklisting): cannot open /sbin/lua*: Permission denied Warning (blacklisting): cannot open /usr/include/lua*: Permission denied Disable /usr/lib64/liblua5.4.so.0.0.0 (requested /usr/lib64/liblua5.4.so.0) Disable /usr/lib64/liblua5.1.so.0.0.0 (requested /usr/lib64/liblua5.1.so) Disable /usr/lib64/liblua5.4.so.0.0.0 (requested /usr/lib64/liblua5.4.so) Disable /usr/lib64/liblua5.1.so.0.0.0 Disable /usr/lib64/liblua5.1.so.0.0.0 (requested /usr/lib64/liblua5.1.so.0) Disable /usr/lib64/liblua5.4.so.0.0.0 Disable /usr/lib64/libmozjs-78.so.0.0.0 (requested /usr/lib64/libmozjs-78.so) Disable /usr/lib64/libmozjs-78.so.0.0.0 Disable /usr/lib64/libmozjs-78.so.0.0.0 (requested /usr/lib64/libmozjs-78.so.0) Warning (blacklisting): cannot open /usr/local/sbin/node: Permission denied Warning (blacklisting): cannot open /usr/sbin/node: Permission denied Disable /usr/bin/node Warning (blacklisting): cannot open /sbin/node: Permission denied Warning (blacklisting): cannot open /usr/include/node: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/core_perl: Permission denied Warning (blacklisting): cannot open /usr/sbin/core_perl: Permission denied Warning (blacklisting): cannot open /sbin/core_perl: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/cpan*: Permission denied Warning (blacklisting): cannot open /usr/sbin/cpan*: Permission denied Disable /usr/bin/cpan-2.280.0-perl-5.34.0 (requested /usr/bin/cpan) Disable /usr/bin/cpan-2.280.0-perl-5.34.0 Warning (blacklisting): cannot open /sbin/cpan*: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/perl: Permission denied Warning (blacklisting): cannot open /usr/sbin/perl: Permission denied Disable /usr/bin/perl Warning (blacklisting): cannot open /sbin/perl: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/site_perl: Permission denied Warning (blacklisting): cannot open /usr/sbin/site_perl: Permission denied Warning (blacklisting): cannot open /sbin/site_perl: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/vendor_perl: Permission denied Warning (blacklisting): cannot open /usr/sbin/vendor_perl: Permission denied Warning (blacklisting): cannot open /sbin/vendor_perl: Permission denied Disable /usr/lib64/perl5 Warning (blacklisting): cannot open /usr/local/sbin/php*: Permission denied Warning (blacklisting): cannot open /usr/sbin/php*: Permission denied Warning (blacklisting): cannot open /sbin/php*: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/ruby: Permission denied Warning (blacklisting): cannot open /usr/sbin/ruby: Permission denied Disable /usr/bin/ruby27 (requested /usr/bin/ruby) Warning (blacklisting): cannot open /sbin/ruby: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/python2*: Permission denied Warning (blacklisting): cannot open /usr/sbin/python2*: Permission denied Warning (blacklisting): cannot open /sbin/python2*: Permission denied Warning (blacklisting): cannot open /usr/include/python2*: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/python3*: Permission denied Warning (blacklisting): cannot open /usr/sbin/python3*: Permission denied Disable /usr/bin/python-exec2c (requested /usr/bin/python3) Disable /usr/bin/python3.9 Disable /usr/bin/python3.10-config Disable /usr/bin/python3.10 Disable /usr/bin/python3.9-config Disable /usr/lib/python-exec/python-exec2 (requested /usr/bin/python3-config) Warning (blacklisting): cannot open /sbin/python3*: Permission denied Warning (blacklisting): cannot open /usr/include/python3*: Permission denied Disable /usr/lib/python3.9 Disable /usr/lib/python3.10 Not blacklist /home/user/.TelegramDesktop Not blacklist /home/user/.local/share/TelegramDesktop Warning (blacklisting): cannot open /usr/local/sbin/bash: Permission denied Warning (blacklisting): cannot open /usr/sbin/bash: Permission denied Warning (blacklisting): cannot open /sbin/bash: Permission denied Disable /bin/bash Warning (blacklisting): cannot open /usr/local/sbin/csh: Permission denied Warning (blacklisting): cannot open /usr/sbin/csh: Permission denied Warning (blacklisting): cannot open /sbin/csh: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/dash: Permission denied Warning (blacklisting): cannot open /usr/sbin/dash: Permission denied Warning (blacklisting): cannot open /sbin/dash: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/fish: Permission denied Warning (blacklisting): cannot open /usr/sbin/fish: Permission denied Warning (blacklisting): cannot open /sbin/fish: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/ksh: Permission denied Warning (blacklisting): cannot open /usr/sbin/ksh: Permission denied Warning (blacklisting): cannot open /sbin/ksh: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/mksh: Permission denied Warning (blacklisting): cannot open /usr/sbin/mksh: Permission denied Warning (blacklisting): cannot open /sbin/mksh: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/oksh: Permission denied Warning (blacklisting): cannot open /usr/sbin/oksh: Permission denied Warning (blacklisting): cannot open /sbin/oksh: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/sh: Permission denied Warning (blacklisting): cannot open /usr/sbin/sh: Permission denied Warning (blacklisting): cannot open /sbin/sh: Permission denied Disable /bin/bash (requested /bin/sh) Warning (blacklisting): cannot open /usr/local/sbin/tclsh: Permission denied Warning (blacklisting): cannot open /usr/sbin/tclsh: Permission denied Disable /usr/bin/tclsh8.6 (requested /usr/bin/tclsh) Warning (blacklisting): cannot open /sbin/tclsh: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/tcsh: Permission denied Warning (blacklisting): cannot open /usr/sbin/tcsh: Permission denied Warning (blacklisting): cannot open /sbin/tcsh: Permission denied Warning (blacklisting): cannot open /usr/local/sbin/zsh: Permission denied Warning (blacklisting): cannot open /usr/sbin/zsh: Permission denied Warning (blacklisting): cannot open /sbin/zsh: Permission denied Directory ${MUSIC} resolved as Videos Not blacklist /home/user/Videos Directory ${PICTURES} resolved as Pictures Not blacklist /home/user/Pictures Directory ${VIDEOS} resolved as Videos Not blacklist /home/user/Videos Mounting tmpfs on /home/user/.cache, check owner: yes 451 166 0:52 / /home/user/.cache rw,nosuid,nodev,noexec,relatime - tmpfs tmpfs rw,mode=755,uid=1000,gid=1000,inode64 mountid=451 fsname=/ dir=/home/user/.cache fstype=tmpfs Mounting read-only /tmp/.X11-unix 452 412 0:33 /.X11-unix /tmp/.X11-unix ro,nosuid,nodev,noexec,noatime - tmpfs tmpfs rw,size=2097152k,inode64 mountid=452 fsname=/.X11-unix dir=/tmp/.X11-unix fstype=tmpfs Disable /sys/fs Disable /sys/module Disable /mnt Disable /media Disable /run/mount Disable /run/media Creating empty /home/user/.config/pulse directory Drop privileges: pid 17, uid 1000, gid 1000, nogroups 0 Mounting noexec /run/firejail/mnt/pulse 1717 83 0:35 /pulse /run/firejail/mnt/pulse rw,nosuid,nodev,noexec - tmpfs tmpfs rw,mode=755,inode64 mountid=1717 fsname=/pulse dir=/run/firejail/mnt/pulse fstype=tmpfs Mounting /run/firejail/mnt/pulse on /home/user/.config/pulse 1733 166 0:35 /pulse /home/user/.config/pulse rw,nosuid,nodev,noexec - tmpfs tmpfs rw,mode=755,inode64 mountid=1733 fsname=/pulse dir=/home/user/.config/pulse fstype=tmpfs Current directory: /home/user Install protocol filter: unix,inet,inet6,netlink configuring 22 seccomp entries in /run/firejail/mnt/seccomp/seccomp.protocol sbox run: /usr/lib64/firejail/fsec-print /run/firejail/mnt/seccomp/seccomp.protocol Dropping all capabilities Drop privileges: pid 18, uid 1000, gid 1000, nogroups 1 No supplementary groups line OP JT JF K ================================= 0000: 20 00 00 00000004 ld data.architecture 0001: 15 04 00 c000003e jeq ARCH_64 0006 (false 0002) 0002: 20 00 00 00000000 ld data.syscall-number 0003: 15 01 00 00000167 jeq unknown 0005 (false 0004) 0004: 06 00 00 7fff0000 ret ALLOW 0005: 05 00 00 00000006 jmp 000c 0006: 20 00 00 00000004 ld data.architecture 0007: 15 01 00 c000003e jeq ARCH_64 0009 (false 0008) 0008: 06 00 00 7fff0000 ret ALLOW 0009: 20 00 00 00000000 ld data.syscall-number 000a: 15 01 00 00000029 jeq socket 000c (false 000b) 000b: 06 00 00 7fff0000 ret ALLOW 000c: 20 00 00 00000010 ld data.args[0] 000d: 15 00 01 00000001 jeq 1 000e (false 000f) 000e: 06 00 00 7fff0000 ret ALLOW 000f: 15 00 01 00000002 jeq 2 0010 (false 0011) 0010: 06 00 00 7fff0000 ret ALLOW 0011: 15 00 01 0000000a jeq a 0012 (false 0013) 0012: 06 00 00 7fff0000 ret ALLOW 0013: 15 00 01 00000010 jeq 10 0014 (false 0015) 0014: 06 00 00 7fff0000 ret ALLOW 0015: 06 00 00 0005005f ret ERRNO(95) configuring 15 seccomp entries in /run/firejail/mnt/seccomp/seccomp.block_secondary sbox run: /usr/lib64/firejail/fsec-print /run/firejail/mnt/seccomp/seccomp.block_secondary Dropping all capabilities Drop privileges: pid 19, uid 1000, gid 1000, nogroups 1 No supplementary groups line OP JT JF K ================================= 0000: 20 00 00 00000004 ld data.architecture 0001: 15 01 00 c000003e jeq ARCH_64 0003 (false 0002) 0002: 06 00 00 00050001 ret ERRNO(1) 0003: 20 00 00 00000000 ld data.syscall-number 0004: 35 01 00 40000000 jge X32_ABI 0006 (false 0005) 0005: 35 01 00 00000000 jge read 0007 (false 0006) 0006: 06 00 00 00050001 ret ERRNO(1) 0007: 15 00 06 00000087 jeq personality 0008 (false 000e) 0008: 20 00 00 00000010 ld data.args[0] 0009: 15 01 00 00000000 jeq 0 000b (false 000a) 000a: 15 00 02 ffffffff jeq ffffffff 000b (false 000d) 000b: 20 00 00 00000014 ld data.args[4] 000c: 15 01 00 00000000 jeq 0 000e (false 000d) 000d: 06 00 00 00050001 ret ERRNO(1) 000e: 06 00 00 7fff0000 ret ALLOW Secondary arch blocking seccomp filter configured configuring 71 seccomp entries in /run/firejail/mnt/seccomp/seccomp sbox run: /usr/lib64/firejail/fsec-print /run/firejail/mnt/seccomp/seccomp Dropping all capabilities Drop privileges: pid 20, uid 1000, gid 1000, nogroups 1 No supplementary groups line OP JT JF K ================================= 0000: 20 00 00 00000004 ld data.architecture 0001: 15 01 00 c000003e jeq ARCH_64 0003 (false 0002) 0002: 06 00 00 7fff0000 ret ALLOW 0003: 20 00 00 00000000 ld data.syscall-number 0004: 35 01 00 40000000 jge X32_ABI 0006 (false 0005) 0005: 35 01 00 00000000 jge read 0007 (false 0006) 0006: 06 00 00 00050001 ret ERRNO(1) 0007: 15 3e 00 0000009f jeq adjtimex 0046 (false 0008) 0008: 15 3d 00 00000131 jeq clock_adjtime 0046 (false 0009) 0009: 15 3c 00 000000e3 jeq clock_settime 0046 (false 000a) 000a: 15 3b 00 000000a4 jeq settimeofday 0046 (false 000b) 000b: 15 3a 00 0000009a jeq modify_ldt 0046 (false 000c) 000c: 15 39 00 000000d4 jeq lookup_dcookie 0046 (false 000d) 000d: 15 38 00 0000012a jeq perf_event_open 0046 (false 000e) 000e: 15 37 00 00000137 jeq process_vm_writev 0046 (false 000f) 000f: 15 36 00 000000b0 jeq delete_module 0046 (false 0010) 0010: 15 35 00 00000139 jeq finit_module 0046 (false 0011) 0011: 15 34 00 000000af jeq init_module 0046 (false 0012) 0012: 15 33 00 000000a1 jeq chroot 0046 (false 0013) 0013: 15 32 00 000000a5 jeq mount 0046 (false 0014) 0014: 15 31 00 0000009b jeq pivot_root 0046 (false 0015) 0015: 15 30 00 000000a6 jeq umount2 0046 (false 0016) 0016: 15 2f 00 0000009c jeq _sysctl 0046 (false 0017) 0017: 15 2e 00 000000b7 jeq afs_syscall 0046 (false 0018) 0018: 15 2d 00 000000ae jeq create_module 0046 (false 0019) 0019: 15 2c 00 000000b1 jeq get_kernel_syms 0046 (false 001a) 001a: 15 2b 00 000000b5 jeq getpmsg 0046 (false 001b) 001b: 15 2a 00 000000b6 jeq putpmsg 0046 (false 001c) 001c: 15 29 00 000000b2 jeq query_module 0046 (false 001d) 001d: 15 28 00 000000b9 jeq security 0046 (false 001e) 001e: 15 27 00 0000008b jeq sysfs 0046 (false 001f) 001f: 15 26 00 000000b8 jeq tuxcall 0046 (false 0020) 0020: 15 25 00 00000086 jeq uselib 0046 (false 0021) 0021: 15 24 00 00000088 jeq ustat 0046 (false 0022) 0022: 15 23 00 000000ec jeq vserver 0046 (false 0023) 0023: 15 22 00 000000ad jeq ioperm 0046 (false 0024) 0024: 15 21 00 000000ac jeq iopl 0046 (false 0025) 0025: 15 20 00 000000f6 jeq kexec_load 0046 (false 0026) 0026: 15 1f 00 00000140 jeq kexec_file_load 0046 (false 0027) 0027: 15 1e 00 000000a9 jeq reboot 0046 (false 0028) 0028: 15 1d 00 000000a7 jeq swapon 0046 (false 0029) 0029: 15 1c 00 000000a8 jeq swapoff 0046 (false 002a) 002a: 15 1b 00 00000130 jeq open_by_handle_at 0046 (false 002b) 002b: 15 1a 00 0000012f jeq name_to_handle_at 0046 (false 002c) 002c: 15 19 00 000000fb jeq ioprio_set 0046 (false 002d) 002d: 15 18 00 00000067 jeq syslog 0046 (false 002e) 002e: 15 17 00 0000012c jeq fanotify_init 0046 (false 002f) 002f: 15 16 00 000000f8 jeq add_key 0046 (false 0030) 0030: 15 15 00 000000f9 jeq request_key 0046 (false 0031) 0031: 15 14 00 000000ed jeq mbind 0046 (false 0032) 0032: 15 13 00 00000100 jeq migrate_pages 0046 (false 0033) 0033: 15 12 00 00000117 jeq move_pages 0046 (false 0034) 0034: 15 11 00 000000fa jeq keyctl 0046 (false 0035) 0035: 15 10 00 000000ce jeq io_setup 0046 (false 0036) 0036: 15 0f 00 000000cf jeq io_destroy 0046 (false 0037) 0037: 15 0e 00 000000d0 jeq io_getevents 0046 (false 0038) 0038: 15 0d 00 000000d1 jeq io_submit 0046 (false 0039) 0039: 15 0c 00 000000d2 jeq io_cancel 0046 (false 003a) 003a: 15 0b 00 000000d8 jeq remap_file_pages 0046 (false 003b) 003b: 15 0a 00 00000143 jeq userfaultfd 0046 (false 003c) 003c: 15 09 00 000000a3 jeq acct 0046 (false 003d) 003d: 15 08 00 00000141 jeq bpf 0046 (false 003e) 003e: 15 07 00 000000b4 jeq nfsservctl 0046 (false 003f) 003f: 15 06 00 000000ab jeq setdomainname 0046 (false 0040) 0040: 15 05 00 000000aa jeq sethostname 0046 (false 0041) 0041: 15 04 00 00000099 jeq vhangup 0046 (false 0042) 0042: 15 03 00 00000065 jeq ptrace 0046 (false 0043) 0043: 15 02 00 00000087 jeq personality 0046 (false 0044) 0044: 15 01 00 00000136 jeq process_vm_readv 0046 (false 0045) 0045: 06 00 00 7fff0000 ret ALLOW 0046: 06 00 00 00050001 ret ERRNO(1) seccomp filter configured Mounting read-only /run/firejail/mnt/seccomp 1735 83 0:35 /seccomp /run/firejail/mnt/seccomp ro,nosuid - tmpfs tmpfs rw,mode=755,inode64 mountid=1735 fsname=/seccomp dir=/run/firejail/mnt/seccomp fstype=tmpfs Seccomp directory: ls /run/firejail/mnt/seccomp drwxr-xr-x root root 160 . drwxr-xr-x root root 280 .. -rw-r--r-- user user 568 seccomp -rw-r--r-- user user 120 seccomp.block_secondary -rw-r--r-- user user 127 seccomp.list -rw-r--r-- user user 0 seccomp.postexec -rw-r--r-- user user 0 seccomp.postexec32 -rw-r--r-- user user 176 seccomp.protocol Active seccomp files: cat /run/firejail/mnt/seccomp/seccomp.list /run/firejail/mnt/seccomp/seccomp.protocol /run/firejail/mnt/seccomp/seccomp.block_secondary /run/firejail/mnt/seccomp/seccomp Dropping all capabilities NO_NEW_PRIVS set Drop privileges: pid 1, uid 1000, gid 1000, nogroups 0 AppArmor enabled Starting application LD_PRELOAD=(null) execvp argument 0: /usr/bin/telegram-desktop Child process initialized in 81.70 ms Installing /run/firejail/mnt/seccomp/seccomp seccomp filter Installing /run/firejail/mnt/seccomp/seccomp.block_secondary seccomp filter Installing /run/firejail/mnt/seccomp/seccomp.protocol seccomp filter monitoring pid 21 (telegram-desktop:21): Telegram-WARNING **: 22:57:02.849: Application was built without embedded fonts, this may lead to font issues. error: : cannot open error: : cannot open error: : cannot open D/tgvoip: === Updating voip config === D/tgvoip: {"enable_vp8_encoder":true,"enable_vp8_decoder":true,"enable_vp9_encoder":true,"enable_vp9_decoder":true,"enable_h265_encoder":true,"enable_h265_decoder":true,"enable_h264_encoder":true,"enable_h264_decoder":true,"audio_frame_size":60,"jitter_min_delay_60":2,"jitter_max_delay_60":10,"jitter_max_slots_60":20,"jitter_losses_to_reset":20,"jitter_resync_threshold":0.5,"audio_congestion_window":1024,"audio_max_bitrate":20000,"audio_max_bitrate_edge":16000,"audio_max_bitrate_gprs":8000,"audio_max_bitrate_saving":8000,"audio_init_bitrate":16000,"audio_init_bitrate_edge":8000,"audio_init_bitrate_gprs":8000,"audio_init_bitrate_saving":8000,"audio_bitrate_step_incr":1000,"audio_bitrate_step_decr":1000,"use_system_ns":true,"use_system_aec":true,"force_tcp":false,"jitter_initial_delay_60":2,"adsp_good_impls":"(Qualcomm Fluence)","bad_call_rating":true,"use_ios_vpio_agc":false,"use_tcp":false,"audio_medium_fec_bitrate":20000,"audio_medium_fec_multiplier":0.1,"audio_strong_fec_bitrate":7000} Invalid return value 0 for stream protocol Invalid return value 0 for stream protocol Invalid return value 0 for stream protocol Invalid return value 0 for stream protocol Invalid return value 0 for stream protocol Invalid return value 0 for stream protocol Invalid return value 0 for stream protocol Invalid return value 0 for stream protocol Sandbox monitor: waitpid 21 retval 21 status 0 Parent is shutting down, bye... ```

rusty-snake commented 2 years ago

Try dbus-user.talk org.freedesktop.portal.* and if this does not work ignore noroot in addition. edit: and whitelist /usr/share/pipewire because of firejail <= 0.9.67.

reagentoo commented 2 years ago

Try dbus-user.talk org.freedesktop.portal.* and if this does not work ignore noroot in addition. edit: and whitelist /usr/share/pipewire because of firejail <= 0.9.67.

Still doesn't work. 😩 Also tried dbus-user.own org.telegram.desktop.*, whitelist /usr/share/pipewire/client.conf, dbus-user.talk org.freedesktop.portal.Desktop (/home/user/.config/firejail/telegram.local)

rusty-snake commented 2 years ago

Did you tried with ignore noroot too?

If it still does not work, you need to comment stuff until it works to near it down (dbus? private-etc?, ...).

reagentoo commented 2 years ago

Did you tried with ignore noroot too?

Exactly.

If it still does not work, you need to comment stuff until it works to near it down (dbus? private-etc?, ...).

Also tried. 😩😩

rusty-snake commented 2 years ago

But with --noprofile it works, right? Then comment everything and uncomment it line for line.

reagentoo commented 2 years ago

But with --noprofile it works, right? Then comment everything and uncomment it line for line.

I've done the next steps:

  1. commented one line in /etc/firejail/telegram.profile: #include whitelist-runuser-common.inc
  2. added only three lines into .config/firejail/telegram.local:
    dbus-user.talk org.freedesktop.portal.Desktop
    ignore noroot
    whitelist /usr/share/pipewire/client.conf

Only with these conditions was it possible to make it work.

reagentoo commented 2 years ago
  1. commented one line in /etc/firejail/telegram.profile: #include whitelist-runuser-common.inc

It seems this part was fixed in f-jail upstream: https://github.com/netblue30/firejail/blob/5d3e0e812bbdb45958031955bb2ed9b961e7f329/etc/inc/whitelist-runuser-common.inc#L13-L14

I've added this lines to .config/firejail/whitelist-runuser-common.local:

whitelist ${RUNUSER}/pipewire-?
whitelist ${RUNUSER}/wayland-?

And got good result.

P.S.: why firejail releases take so long ????

rusty-snake commented 2 years ago

P.S.: why firejail releases take so long ????

I always ask myself that too. At least for profiles some kind of weekly snapshots would make sense IMHO. It would be still an issues if a newer firejail versions introduces new commands (e.g. noinput or dbus filtering) which are used by profiles and you "import" them into an older firejail version. That's something to solve, but it is not impossible. Also it would allow some kind a testing set installed and tested by much more users. You could then for example do things like "We think it is ok to add foo to bar.profile but let's test this". ATM this is risky, given that a if you release a broken profile into the firejail version used by debian stable, it could take years until users get a working profile.