#7128·firejail

chromium: browsers crash on launch

Author: winningTheWhoCreated Apr 8, 2026Updated Sep 12, 2026
Labelsneedinfo

Description

Describe the bug

Steps to Reproduce

Steps to reproduce the behavior

  1. Debian 13 installation, brand new using Brave installed from the Brave official repo, using Debian maintained Firejail (0.9.74)
  2. Run Firecfg to enable firejail for Brave and other applications.
  3. Launch Brave from Terminal with firejail intercepting the link
  4. Verify Firejail is at fault by bypassing firejail, running this from terminal "/usr/bin/brave-browser"

Expected behavior

Brave Browser Launches

Actual behavior

The following shows in the terminal, Brave does not launch:

Reading profile /etc/firejail/brave-browser.profile
Reading profile /home/citizenone/.config/firejail/brave.profile
Reading profile /etc/firejail/chromium-common.profile
Reading profile /etc/firejail/whitelist-run-common.inc
Reading profile /etc/firejail/blink-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/disable-xdg.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-runuser-common.inc
Reading profile /etc/firejail/whitelist-usr-share-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Warning: networking feature is disabled in Firejail configuration file
firejail version 0.9.74

Parent pid 30644, child pid 30645
Warning: cannot find /var/run/utmp
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Base filesystem installed in 102.67 ms
Child process initialized in 225.55 ms
[11:11:0407/184244.457911:FATAL:sandbox/linux/services/credentials.cc:131] Check failed: . : Permission denied (13)
[0407/184244.458164:ERROR:third_party/crashpad/crashpad/util/linux/scoped_ptrace_attach.cc:27] ptrace: Permission denied (13)
[0407/184244.458314:ERROR:third_party/crashpad/crashpad/handler/linux/exception_handler_server.cc:142] tgkill: Permission denied (13)
[0407/184244.458344:ERROR:third_party/crashpad/crashpad/handler/linux/exception_handler_server.cc:142] tgkill: Permission denied (13)
/usr/bin/brave-browser: line 40:    11 Trace/breakpoint trap   (core dumped) "$HERE/brave" "$@"

Parent is shutting down, bye...

Behavior without a profile

What changed calling LC_ALL=C firejail --noprofile /path/to/program in a terminal?

Additional context

Any other detail that may help to understand/debug the problem

Environment

  • Name/version/arch of the Linux kernel (uname -srm):
  • Name/version of the Linux distribution (e.g. "Ubuntu 20.04" or "Arch Linux"):
  • Name/version of the relevant program(s)/package(s) (e.g. "firefox 134.0-1, mesa 1:24.3.3-2"):
  • Version of Firejail (firejail --version):
  • If you use a development version of firejail, also the commit from which it was compiled (git rev-parse HEAD):

Checklist

  • I am using firejail 0.9.80 or later
  • I am using the full program path (e.g. firejail /usr/bin/vlc instead of firejail vlc; see https://github.com/netblue30/firejail/issues/2877)
  • The issues is caused by firejail (i.e. running the program by path (e.g. /usr/bin/vlc) "fixes" it).
  • I can reproduce the issue without custom modifications (e.g. globals.local).
  • The program has a profile. (If not, request one in https://github.com/netblue30/firejail/issues/1139)
  • The profile (and redirect profile if exists) hasn't already been fixed upstream.
  • I have performed a short search for similar issues (to avoid opening a duplicate).
    • I'm aware of browser-allow-drm yes/browser-disable-u2f no in firejail.config to allow DRM/U2F in browsers.
  • I used --profile=PROFILENAME to set the right profile. (Only relevant for AppImages)

Log

Output of LC_ALL=C firejail /path/to/program

LC_ALL=C firejail --noprofile /usr/bin/brave-browser
firejail version 0.9.74

Parent pid 31002, child pid 31003
Warning: cannot find /var/run/utmp
Base filesystem installed in 0.10 ms
Child process initialized in 7.67 ms
Opening in existing browser session.

Parent is shutting down, bye...

Program seems to launch escaped from Firejail.

Output of LC_ALL=C firejail --debug /path/to/program

log.txt