Baike.dev
Log in
Back to tool/Back to issues
#5698·firejail

libreoffice: Warning: failed to launch javaldx

Author: marek22kCreated Feb 28, 2023Updated Jul 13, 2026

Description

LibreOffice does not start.

Steps to Reproduce

Steps to reproduce the behavior

  1. Install LibreOffice via apt
  2. Try to start LibreOffice

Expected behavior

LibreOffice works.

Actual behavior

LibreOffice does not works:

libreoffice 
Reading profile /etc/firejail/libreoffice.profile
Reading profile /etc/firejail/allow-java.inc
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-run-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Warning: networking feature is disabled in Firejail configuration file
Parent pid 13370, child pid 13371
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Warning: not remounting /home/marek/.ssh/config
Warning: cleaning all supplementary groups
Child process initialized in 242.49 ms
Warning: failed to launch javaldx - java may not function correctly
ERROR 4 forking process

Parent is shutting down, bye...

Behavior without a profile

What changed calling LC_ALL=C firejail --noprofile /path/to/program in a terminal?

$LC_ALL=C firejail --noprofile libreoffice
Parent pid 13818, child pid 13819
Child process initialized in 23.94 ms
Warning: an existing sandbox was detected. /usr/bin/libreoffice will run without any additional sandboxing features

Parent is shutting down, bye...

Environment

  • Linux distribution and version (e.g. "Ubuntu 20.04" or "Arch Linux")
$lsb_release -a
No LSB modules are available.
Distributor ID:	Parrot
Description:	Parrot OS 5.2 (Electro Ara)
Release:	5.2
Codename:	ara

based on Debian 11

  • Firejail version (firejail --version).
$firejail --version
firejail version 0.9.72

Compile time support:
	- always force nonewprivs support is disabled
	- AppArmor support is enabled
	- AppImage support is enabled
	- chroot support is enabled
	- D-BUS proxy support is enabled
	- file transfer support is enabled
	- firetunnel support is disabled
	- IDS support is enabled
	- networking support is enabled
	- output logging is enabled
	- overlayfs support is disabled
	- private-home support is enabled
	- private-cache and tmpfs as user enabled
	- SELinux support is enabled
	- user namespace support is enabled
	- X11 sandboxing support is enabled

Checklist

  • The issues is caused by firejail (i.e. running the program by path (e.g. /usr/bin/vlc) "fixes" it).
  • I can reproduce the issue without custom modifications (e.g. globals.local).
  • The program has a profile. (If not, request one in https://github.com/netblue30/firejail/issues/1139)
  • The profile (and redirect profile if exists) hasn't already been fixed upstream.
  • I have performed a short search for similar issues (to avoid opening a duplicate).
  • The error still exists despite several closed issues. None of the already closed issues is marked as "not planed". Therefore I open a new issue.

Workaround

  1. Install LibreOffice via Flatpak
  2. Run LibreOffice via firejail --ignore=apparmor /usr/bin/libreoffice
  3. Add ignore apparmor in /etc/firejail/libreoffice.local

Log

Output of LC_ALL=C firejail /path/to/program 

$LC_ALL=C firejail libreoffice 
Reading profile /etc/firejail/libreoffice.profile
Reading profile /etc/firejail/allow-java.inc
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-run-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Warning: networking feature is disabled in Firejail configuration file
Parent pid 14731, child pid 14732
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Warning: not remounting /home/marek/.ssh/config
Warning: cleaning all supplementary groups
Child process initialized in 193.21 ms
Warning: an existing sandbox was detected. /usr/bin/libreoffice will run without any additional sandboxing features
Warning: failed to launch javaldx - java may not function correctly
ERROR 4 forking process

Parent is shutting down, bye...

Output of LC_ALL=C firejail --debug /path/to/program

https://paste.i2pd.xyz/?1f7331f82321da69#3yggcZ5rkbm3zB7XbPBvJBrQpvNYLgFzSDUDEvuBkNf3 https://gist.github.com/marek22k/0a168124a561cb9053785e74aa1eb13a

Addional logs

$sudo dmesg --follow-new --human | grep apparmor | grep libreoffice results in:

[Feb28 10:15] audit: type=1400 audit(1677575737.939:14756): apparmor="DENIED" operation="exec" info="no new privs" error=-1 profile="firejail-default" name="/usr/lib/libreoffice/program/javaldx" pid=18159 comm="osl_executeProc" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="firejail-default//&unconfined"
[  +0,000290] audit: type=1400 audit(1677575737.939:14757): apparmor="ALLOWED" operation="exec" info="no new privs" error=-1 profile="libreoffice-oopslash" name="/usr/lib/libreoffice/program/javaldx" pid=18159 comm="osl_executeProc" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="firejail-default//&unconfined"
[  +0,000630] audit: type=1400 audit(1677575737.939:14758): apparmor="DENIED" operation="exec" info="no new privs" error=-1 profile="firejail-default" name="/usr/lib/libreoffice/program/soffice.bin" pid=18161 comm="osl_executeProc" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="firejail-default//&libreoffice-soffice"
[  +0,000006] audit: type=1400 audit(1677575737.939:14759): apparmor="ALLOWED" operation="exec" info="no new privs" error=-1 profile="libreoffice-oopslash" name="/usr/lib/libreoffice/program/soffice.bin" pid=18161 comm="osl_executeProc" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="firejail-default//&libreoffice-soffice"
[Feb28 10:16] audit: type=1400 audit(1677575767.952:14760): apparmor="DENIED" operation="exec" info="no new privs" error=-1 profile="firejail-default" name="/usr/lib/libreoffice/program/javaldx" pid=18245 comm="osl_executeProc" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="firejail-default//&unconfined"
[  +0,000009] audit: type=1400 audit(1677575767.952:14761): apparmor="ALLOWED" operation="exec" info="no new privs" error=-1 profile="libreoffice-oopslash" name="/usr/lib/libreoffice/program/javaldx" pid=18245 comm="osl_executeProc" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="firejail-default//&unconfined"
[  +0,000822] audit: type=1400 audit(1677575767.956:14762): apparmor="DENIED" operation="exec" info="no new privs" error=-1 profile="firejail-default" name="/usr/lib/libreoffice/program/soffice.bin" pid=18247 comm="osl_executeProc" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="firejail-default//&libreoffice-soffice"
[  +0,000028] audit: type=1400 audit(1677575767.956:14763): apparmor="ALLOWED" operation="exec" info="no new privs" error=-1 profile="libreoffice-oopslash" name="/usr/lib/libreoffice/program/soffice.bin" pid=18247 comm="osl_executeProc" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="firejail-default//&libreoffice-soffice"
[  +4,121288] audit: type=1400 audit(1677575772.076:14764): apparmor="DENIED" operation="exec" info="no new privs" error=-1 profile="firejail-default" name="/usr/lib/libreoffice/program/javaldx" pid=18278 comm="osl_executeProc" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="firejail-default//&unconfined"
[  +0,000014] audit: type=1400 audit(1677575772.076:14765): apparmor="ALLOWED" operation="exec" info="no new privs" error=-1 profile="libreoffice-oopslash" name="/usr/lib/libreoffice/program/javaldx" pid=18278 comm="osl_executeProc" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="firejail-default//&unconfined"
[  +0,000692] audit: type=1400 audit(1677575772.076:14766): apparmor="DENIED" operation="exec" info="no new privs" error=-1 profile="firejail-default" name="/usr/lib/libreoffice/program/soffice.bin" pid=18280 comm="osl_executeProc" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="firejail-default//&libreoffice-soffice"
[  +0,000010] audit: type=1400 audit(1677575772.076:14767): apparmor="ALLOWED" operation="exec" info="no new privs" error=-1 profile="libreoffice-oopslash" name="/usr/lib/libreoffice/program/soffice.bin" pid=18280 comm="osl_executeProc" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="firejail-default//&libreoffice-soffice"

Source: netblue30/firejail

View original on GitHubView discussion on GitHub