Created
March 9, 2024 16:52
-
-
Save marek22k/763449af038fefe103cf8c57259eada1 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Script started on 2024-03-09 16:52:03+00:00 [TERM="xterm-256color" TTY="/dev/pts/2" COLUMNS="80" LINES="24"] | |
| ^[[A]0;marek@ciel:~[?2004h[0;31m┌─[[0;39mmarek[01;33m@[01;96mciel[0;31m]─[[0;32m~[0;31m] | |
| [0;31m└──╼ [0m[01;33m$[0mgpg -K[3Pirbrakeimap-backup | |
| [C[C[C[C[C[C[6@./restart_vpns.sh[C[K[K[K[K[K[K[K[K[K[K[K[K[K[K[K[K[K[K[7mLC_ALL=C firejail --debug /path/to/program[27m | |
| [C[C[C[C[C[C[1PLC_ALL=C firejail --debug /path/to/progra[K[K[K[K[K[K[K[K[K[K[K[K[K[Kusr/bin/torbrowser-launcher | |
| [?2004l | |
| Building quoted command line: '/usr/bin/torbrowser-launcher' | |
| Command name #torbrowser-launcher# | |
| Found torbrowser-launcher.profile profile in /etc/firejail directory | |
| Reading profile /etc/firejail/torbrowser-launcher.profile | |
| Found torbrowser-launcher.local profile in /home/marek/.config/firejail directory | |
| Reading profile /home/marek/.config/firejail/torbrowser-launcher.local | |
| Found allow-python2.inc profile in /etc/firejail directory | |
| Reading profile /etc/firejail/allow-python2.inc | |
| Found allow-python3.inc profile in /etc/firejail directory | |
| Reading profile /etc/firejail/allow-python3.inc | |
| Found disable-common.inc profile in /etc/firejail directory | |
| Reading profile /etc/firejail/disable-common.inc | |
| Found disable-devel.inc profile in /etc/firejail directory | |
| Reading profile /etc/firejail/disable-devel.inc | |
| Found disable-exec.inc profile in /etc/firejail directory | |
| Reading profile /etc/firejail/disable-exec.inc | |
| Found disable-interpreters.inc profile in /etc/firejail directory | |
| Reading profile /etc/firejail/disable-interpreters.inc | |
| Found disable-programs.inc profile in /etc/firejail directory | |
| Reading profile /etc/firejail/disable-programs.inc | |
| Found disable-xdg.inc profile in /etc/firejail directory | |
| Reading profile /etc/firejail/disable-xdg.inc | |
| Found whitelist-common.inc profile in /etc/firejail directory | |
| Reading profile /etc/firejail/whitelist-common.inc | |
| Found whitelist-var-common.inc profile in /etc/firejail directory | |
| Reading profile /etc/firejail/whitelist-var-common.inc | |
| Found whitelist-runuser-common.inc profile in /etc/firejail directory | |
| Reading profile /etc/firejail/whitelist-runuser-common.inc | |
| Found whitelist-usr-share-common.inc profile in /etc/firejail directory | |
| Reading profile /etc/firejail/whitelist-usr-share-common.inc | |
| [profile] combined protocol list: "unix,inet,inet6" | |
| Seccomp list in: !chroot, check list: @default-keep, prelist: unknown, | |
| DISPLAY=:0.0 parsed as 0 | |
| Using the local network stack | |
| Parent pid 182445, child pid 182446 | |
| Initializing child process | |
| Host network configured | |
| PID namespace installed | |
| Mounting tmpfs on /run/firejail/mnt directory | |
| Creating empty /run/firejail/mnt/seccomp directory | |
| Creating empty /run/firejail/mnt/seccomp/seccomp.protocol file | |
| Creating empty /run/firejail/mnt/seccomp/seccomp.postexec file | |
| Creating empty /run/firejail/mnt/seccomp/seccomp.postexec32 file | |
| Build protocol filter: unix,inet,inet6 | |
| sbox run: /run/firejail/lib/fseccomp protocol build unix,inet,inet6 /run/firejail/mnt/seccomp/seccomp.protocol | |
| Dropping all capabilities | |
| Drop privileges: pid 2, uid 1000, gid 1000, force_nogroups 1 | |
| No supplementary groups | |
| Mounting /proc filesystem representing the PID namespace | |
| Basic read-only filesystem: | |
| Mounting read-only /etc | |
| 1072 1042 0:26 /@/etc /etc ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1072 fsname=/@/etc dir=/etc fstype=btrfs | |
| Mounting noexec /etc | |
| 1073 1072 0:26 /@/etc /etc ro,nosuid,nodev,noexec,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1073 fsname=/@/etc dir=/etc fstype=btrfs | |
| Mounting read-only /var | |
| 1074 1042 0:26 /@/var /var ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1074 fsname=/@/var dir=/var fstype=btrfs | |
| Mounting noexec /var | |
| 1075 1074 0:26 /@/var /var ro,nosuid,nodev,noexec,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1075 fsname=/@/var dir=/var fstype=btrfs | |
| Mounting read-only /usr | |
| 1076 1042 0:26 /@/usr /usr ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1076 fsname=/@/usr dir=/usr fstype=btrfs | |
| Mounting tmpfs on /var/lock | |
| Mounting tmpfs on /var/tmp | |
| Mounting tmpfs on /var/log | |
| Create the new utmp file | |
| Mount the new utmp file | |
| Cleaning /home directory | |
| Cleaning /run/user directory | |
| Sanitizing /etc/passwd, UID_MIN 1000 | |
| Sanitizing /etc/group, GID_MIN 1000 | |
| Disable /home/marek/.config/firejail | |
| Disable /run/firejail/sandbox | |
| Disable /run/firejail/network | |
| Disable /run/firejail/bandwidth | |
| Disable /run/firejail/name | |
| Disable /run/firejail/profile | |
| Disable /run/firejail/x11 | |
| Mounting tmpfs on /dev | |
| mounting /run/firejail/mnt/dev/snd directory | |
| mounting /run/firejail/mnt/dev/dri directory | |
| Process /dev/shm directory | |
| Copying files in the new bin directory | |
| Checking /usr/local/bin/execdesktop | |
| Checking /usr/bin/execdesktop | |
| Checking /bin/execdesktop | |
| Checking /usr/games/execdesktop | |
| Checking /usr/local/games/execdesktop | |
| Checking /usr/local/sbin/execdesktop | |
| Checking /usr/sbin/execdesktop | |
| Checking /sbin/execdesktop | |
| Warning: file execdesktop not found | |
| Checking /usr/local/bin/bash | |
| Checking /usr/bin/bash | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/bash /run/firejail/mnt/bin | |
| Checking /usr/local/bin/cat | |
| Checking /usr/bin/cat | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/cat /run/firejail/mnt/bin | |
| Checking /usr/local/bin/cp | |
| Checking /usr/bin/cp | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/cp /run/firejail/mnt/bin | |
| Checking /usr/local/bin/cut | |
| Checking /usr/bin/cut | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/cut /run/firejail/mnt/bin | |
| Checking /usr/local/bin/dirname | |
| Checking /usr/bin/dirname | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/dirname /run/firejail/mnt/bin | |
| Checking /usr/local/bin/env | |
| Checking /usr/bin/env | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/env /run/firejail/mnt/bin | |
| Checking /usr/local/bin/expr | |
| Checking /usr/bin/expr | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/expr /run/firejail/mnt/bin | |
| Checking /usr/local/bin/file | |
| Checking /usr/bin/file | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/file /run/firejail/mnt/bin | |
| Checking /usr/local/bin/gpg | |
| Checking /usr/bin/gpg | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/gpg /run/firejail/mnt/bin | |
| Checking /usr/local/bin/grep | |
| Checking /usr/bin/grep | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/grep /run/firejail/mnt/bin | |
| Checking /usr/local/bin/gxmessage | |
| Checking /usr/bin/gxmessage | |
| Checking /bin/gxmessage | |
| Checking /usr/games/gxmessage | |
| Checking /usr/local/games/gxmessage | |
| Checking /usr/local/sbin/gxmessage | |
| Checking /usr/sbin/gxmessage | |
| Checking /sbin/gxmessage | |
| Warning: file gxmessage not found | |
| Checking /usr/local/bin/id | |
| Checking /usr/bin/id | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/id /run/firejail/mnt/bin | |
| Checking /usr/local/bin/kdialog | |
| Checking /usr/bin/kdialog | |
| Checking /bin/kdialog | |
| Checking /usr/games/kdialog | |
| Checking /usr/local/games/kdialog | |
| Checking /usr/local/sbin/kdialog | |
| Checking /usr/sbin/kdialog | |
| Checking /sbin/kdialog | |
| Warning: file kdialog not found | |
| Checking /usr/local/bin/ln | |
| Checking /usr/bin/ln | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/ln /run/firejail/mnt/bin | |
| Checking /usr/local/bin/mkdir | |
| Checking /usr/bin/mkdir | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/mkdir /run/firejail/mnt/bin | |
| Checking /usr/local/bin/mv | |
| Checking /usr/bin/mv | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/mv /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python-argcomplete-check-easy-install-script /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python-argcomplete-tcsh /run/firejail/mnt/bin | |
| file /usr/share/texmf-dist/scripts/pythontex/pythontex.py not found | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/pythontex /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python3.11 /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python3.11-config /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python-config /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python3.11 /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python3 /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python3.11-config /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python3-config /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python3.11 /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python3.11-config /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /bin/python-argcomplete-check-easy-install-script /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /bin/python-argcomplete-tcsh /run/firejail/mnt/bin | |
| file /usr/share/texmf-dist/scripts/pythontex/pythontex.py not found | |
| sbox run: /run/firejail/lib/fcopy /bin/pythontex /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python3.11 /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /bin/python /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python3.11-config /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /bin/python-config /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python3.11 /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /bin/python3 /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python3.11-config /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /bin/python3-config /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /bin/python3.11 /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /bin/python3.11-config /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/sbin/python-argcomplete-check-easy-install-script /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/sbin/python-argcomplete-tcsh /run/firejail/mnt/bin | |
| file /usr/share/texmf-dist/scripts/pythontex/pythontex.py not found | |
| sbox run: /run/firejail/lib/fcopy /usr/sbin/pythontex /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python3.11 /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/sbin/python /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python3.11-config /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/sbin/python-config /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python3.11 /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/sbin/python3 /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python3.11-config /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/sbin/python3-config /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/sbin/python3.11 /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/sbin/python3.11-config /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /sbin/python-argcomplete-check-easy-install-script /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /sbin/python-argcomplete-tcsh /run/firejail/mnt/bin | |
| file /usr/share/texmf-dist/scripts/pythontex/pythontex.py not found | |
| sbox run: /run/firejail/lib/fcopy /sbin/pythontex /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python3.11 /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /sbin/python /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python3.11-config /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /sbin/python-config /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python3.11 /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /sbin/python3 /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/python3.11-config /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /sbin/python3-config /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /sbin/python3.11 /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /sbin/python3.11-config /run/firejail/mnt/bin | |
| Checking /usr/local/bin/rm | |
| Checking /usr/bin/rm | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/rm /run/firejail/mnt/bin | |
| Checking /usr/local/bin/sed | |
| Checking /usr/bin/sed | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/sed /run/firejail/mnt/bin | |
| Checking /usr/local/bin/sh | |
| Checking /usr/bin/sh | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/bash /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/sh /run/firejail/mnt/bin | |
| Checking /usr/local/bin/tail | |
| Checking /usr/bin/tail | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/tail /run/firejail/mnt/bin | |
| Checking /usr/local/bin/tar | |
| Checking /usr/bin/tar | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/tar /run/firejail/mnt/bin | |
| Checking /usr/local/bin/tclsh | |
| Checking /usr/bin/tclsh | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/tclsh8.6 /run/firejail/mnt/bin | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/tclsh /run/firejail/mnt/bin | |
| Checking /usr/local/bin/test | |
| Checking /usr/bin/test | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/test /run/firejail/mnt/bin | |
| Checking /usr/local/bin/tor-browser | |
| Checking /usr/bin/tor-browser | |
| Checking /bin/tor-browser | |
| Checking /usr/games/tor-browser | |
| Checking /usr/local/games/tor-browser | |
| Checking /usr/local/sbin/tor-browser | |
| Checking /usr/sbin/tor-browser | |
| Checking /sbin/tor-browser | |
| Warning: file tor-browser not found | |
| Checking /usr/local/bin/tor-browser-en | |
| Checking /usr/bin/tor-browser-en | |
| Checking /bin/tor-browser-en | |
| Checking /usr/games/tor-browser-en | |
| Checking /usr/local/games/tor-browser-en | |
| Checking /usr/local/sbin/tor-browser-en | |
| Checking /usr/sbin/tor-browser-en | |
| Checking /sbin/tor-browser-en | |
| Warning: file tor-browser-en not found | |
| Checking /usr/local/bin/torbrowser-launcher | |
| Checking /usr/bin/torbrowser-launcher | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/torbrowser-launcher /run/firejail/mnt/bin | |
| Checking /usr/local/bin/update-desktop-database | |
| Checking /usr/bin/update-desktop-database | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/update-desktop-database /run/firejail/mnt/bin | |
| Checking /usr/local/bin/xmessage | |
| Checking /usr/bin/xmessage | |
| Checking /bin/xmessage | |
| Checking /usr/games/xmessage | |
| Checking /usr/local/games/xmessage | |
| Checking /usr/local/sbin/xmessage | |
| Checking /usr/sbin/xmessage | |
| Checking /sbin/xmessage | |
| Warning: file xmessage not found | |
| Checking /usr/local/bin/xz | |
| Checking /usr/bin/xz | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/xz /run/firejail/mnt/bin | |
| Checking /usr/local/bin/zenity | |
| Checking /usr/bin/zenity | |
| sbox run: /run/firejail/lib/fcopy /usr/bin/zenity /run/firejail/mnt/bin | |
| Mount-bind /run/firejail/mnt/bin on top of /usr/local/bin | |
| Mount-bind /run/firejail/mnt/bin on top of /usr/bin | |
| Mount-bind /run/firejail/mnt/bin on top of /bin | |
| Mount-bind /run/firejail/mnt/bin on top of /usr/local/games | |
| Mount-bind /run/firejail/mnt/bin on top of /usr/local/sbin | |
| Mount-bind /run/firejail/mnt/bin on top of /usr/sbin | |
| Mount-bind /run/firejail/mnt/bin on top of /sbin | |
| 79 programs installed in 100.07 ms | |
| Generate private-tmp whitelist commands | |
| Creating empty /run/firejail/mnt/dbus directory | |
| Creating empty /run/firejail/mnt/dbus/user file | |
| blacklist /run/user/1000/bus | |
| Creating empty /run/firejail/mnt/dbus/system file | |
| blacklist /run/dbus/system_bus_socket | |
| blacklist /run/firejail/dbus | |
| Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. | |
| Mounting read-only /proc/sys | |
| Remounting /sys directory | |
| Disable /sys/firmware | |
| Disable /sys/hypervisor | |
| Disable /sys/power | |
| Disable /sys/kernel/debug | |
| Disable /sys/kernel/vmcoreinfo | |
| Disable /proc/sys/fs/binfmt_misc | |
| Disable /proc/sys/kernel/core_pattern | |
| Disable /proc/sys/kernel/modprobe | |
| Disable /proc/sysrq-trigger | |
| Disable /proc/sys/vm/panic_on_oom | |
| Disable /proc/irq | |
| Disable /proc/bus | |
| Disable /proc/timer_list | |
| Disable /proc/kcore | |
| Disable /proc/kallsyms | |
| Disable /usr/lib/modules/6.7.9-arch1-1/build (requested /usr/src/linux) | |
| Disable /usr/lib/modules (requested /lib/modules) | |
| Disable /usr/lib/debug | |
| Disable /boot | |
| Disable /run/user/1000/gnupg | |
| Disable /run/user/1000/systemd | |
| Disable /proc/kmsg | |
| Copying files in the new /etc directory: | |
| Copying /etc/alsa to private /etc | |
| sbox run: /run/firejail/lib/fcopy --follow-link /etc/alsa /run/firejail/mnt/etc/alsa | |
| Copying /etc/alternatives to private /etc | |
| sbox run: /run/firejail/lib/fcopy --follow-link /etc/alternatives /run/firejail/mnt/etc/alternatives | |
| Warning: file /etc/asound.conf not found. | |
| Warning: skipping asound.conf for private /etc | |
| Copying /etc/ca-certificates to private /etc | |
| sbox run: /run/firejail/lib/fcopy --follow-link /etc/ca-certificates /run/firejail/mnt/etc/ca-certificates | |
| Warning: file /etc/crypto-policies not found. | |
| Warning: skipping crypto-policies for private /etc | |
| Copying /etc/fonts to private /etc | |
| sbox run: /run/firejail/lib/fcopy --follow-link /etc/fonts /run/firejail/mnt/etc/fonts | |
| Copying /etc/ld.so.cache to private /etc | |
| sbox run: /run/firejail/lib/fcopy --follow-link /etc/ld.so.cache /run/firejail/mnt/etc | |
| Copying /etc/ld.so.conf to private /etc | |
| sbox run: /run/firejail/lib/fcopy --follow-link /etc/ld.so.conf /run/firejail/mnt/etc | |
| Copying /etc/ld.so.conf.d to private /etc | |
| sbox run: /run/firejail/lib/fcopy --follow-link /etc/ld.so.conf.d /run/firejail/mnt/etc/ld.so.conf.d | |
| Copying /etc/ld.so.preload to private /etc | |
| sbox run: /run/firejail/lib/fcopy --follow-link /etc/ld.so.preload /run/firejail/mnt/etc | |
| Copying /etc/machine-id to private /etc | |
| sbox run: /run/firejail/lib/fcopy --follow-link /etc/machine-id /run/firejail/mnt/etc | |
| Warning: file /etc/pki not found. | |
| Warning: skipping pki for private /etc | |
| Copying /etc/pulse to private /etc | |
| sbox run: /run/firejail/lib/fcopy --follow-link /etc/pulse /run/firejail/mnt/etc/pulse | |
| Copying /etc/resolv.conf to private /etc | |
| sbox run: /run/firejail/lib/fcopy --follow-link /etc/resolv.conf /run/firejail/mnt/etc | |
| Copying /etc/ssl to private /etc | |
| sbox run: /run/firejail/lib/fcopy --follow-link /etc/ssl /run/firejail/mnt/etc/ssl | |
| Mount-bind /run/firejail/mnt/etc on top of /etc | |
| Private /etc installed in 34.29 ms | |
| Cannot find /usr/etc: No such file or directory | |
| Mount-bind /run/firejail/mnt/usretc on top of /usr/etc | |
| Cannot find /usr/etc: No such file or directory | |
| Private /usr/etc installed in 0.02 ms | |
| Debug 588: whitelist ${DOWNLOADS} | |
| Directory ${DOWNLOADS} resolved as Downloads | |
| Debug 609: expanded: /home/marek/Downloads | |
| Debug 620: new_name: /home/marek/Downloads | |
| Debug 630: dir: /home/marek | |
| Adding whitelist top level directory /home/marek | |
| Debug 588: whitelist ${HOME}/.config/torbrowser | |
| Debug 609: expanded: /home/marek/.config/torbrowser | |
| Debug 620: new_name: /home/marek/.config/torbrowser | |
| Debug 630: dir: /home/marek | |
| Debug 588: whitelist ${HOME}/.local/share/torbrowser | |
| Debug 609: expanded: /home/marek/.local/share/torbrowser | |
| Debug 620: new_name: /home/marek/.local/share/torbrowser | |
| Debug 630: dir: /home/marek | |
| Debug 588: whitelist /opt/tor-browser | |
| Debug 609: expanded: /opt/tor-browser | |
| Debug 620: new_name: /opt/tor-browser | |
| Debug 630: dir: /opt | |
| Adding whitelist top level directory /opt | |
| Removed path: whitelist /opt/tor-browser | |
| new_name: /opt/tor-browser | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/torbrowser-launcher | |
| Debug 609: expanded: /usr/share/torbrowser-launcher | |
| Debug 620: new_name: /usr/share/torbrowser-launcher | |
| Debug 630: dir: /usr/share | |
| Adding whitelist top level directory /usr/share | |
| Debug 588: whitelist ${HOME}/.XCompose | |
| Debug 609: expanded: /home/marek/.XCompose | |
| Debug 620: new_name: /home/marek/.XCompose | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.XCompose | |
| new_name: /home/marek/.XCompose | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.alsaequal.bin | |
| Debug 609: expanded: /home/marek/.alsaequal.bin | |
| Debug 620: new_name: /home/marek/.alsaequal.bin | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.alsaequal.bin | |
| new_name: /home/marek/.alsaequal.bin | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.asoundrc | |
| Debug 609: expanded: /home/marek/.asoundrc | |
| Debug 620: new_name: /home/marek/.asoundrc | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.asoundrc | |
| new_name: /home/marek/.asoundrc | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.config/ibus | |
| Debug 609: expanded: /home/marek/.config/ibus | |
| Debug 620: new_name: /home/marek/.config/ibus | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.config/ibus | |
| new_name: /home/marek/.config/ibus | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.config/mimeapps.list | |
| Debug 609: expanded: /home/marek/.config/mimeapps.list | |
| Debug 620: new_name: /home/marek/.config/mimeapps.list | |
| Debug 630: dir: /home/marek | |
| Debug 588: whitelist ${HOME}/.config/pkcs11 | |
| Debug 609: expanded: /home/marek/.config/pkcs11 | |
| Debug 620: new_name: /home/marek/.config/pkcs11 | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.config/pkcs11 | |
| new_name: /home/marek/.config/pkcs11 | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.config/user-dirs.dirs | |
| Debug 609: expanded: /home/marek/.config/user-dirs.dirs | |
| Debug 620: new_name: /home/marek/.config/user-dirs.dirs | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.config/user-dirs.dirs | |
| new_name: /home/marek/.config/user-dirs.dirs | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.config/user-dirs.locale | |
| Debug 609: expanded: /home/marek/.config/user-dirs.locale | |
| Debug 620: new_name: /home/marek/.config/user-dirs.locale | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.config/user-dirs.locale | |
| new_name: /home/marek/.config/user-dirs.locale | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.drirc | |
| Debug 609: expanded: /home/marek/.drirc | |
| Debug 620: new_name: /home/marek/.drirc | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.drirc | |
| new_name: /home/marek/.drirc | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.icons | |
| Debug 609: expanded: /home/marek/.icons | |
| Debug 620: new_name: /home/marek/.icons | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.icons | |
| new_name: /home/marek/.icons | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.local/share/applications | |
| Debug 609: expanded: /home/marek/.local/share/applications | |
| Debug 620: new_name: /home/marek/.local/share/applications | |
| Debug 630: dir: /home/marek | |
| Debug 588: whitelist ${HOME}/.local/share/icons | |
| Debug 609: expanded: /home/marek/.local/share/icons | |
| Debug 620: new_name: /home/marek/.local/share/icons | |
| Debug 630: dir: /home/marek | |
| Debug 588: whitelist ${HOME}/.local/share/mime | |
| Debug 609: expanded: /home/marek/.local/share/mime | |
| Debug 620: new_name: /home/marek/.local/share/mime | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.local/share/mime | |
| new_name: /home/marek/.local/share/mime | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.mime.types | |
| Debug 609: expanded: /home/marek/.mime.types | |
| Debug 620: new_name: /home/marek/.mime.types | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.mime.types | |
| new_name: /home/marek/.mime.types | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.sndio/cookie | |
| Debug 609: expanded: /home/marek/.sndio/cookie | |
| Debug 620: new_name: /home/marek/.sndio/cookie | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.sndio/cookie | |
| new_name: /home/marek/.sndio/cookie | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.uim.d | |
| Debug 609: expanded: /home/marek/.uim.d | |
| Debug 620: new_name: /home/marek/.uim.d | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.uim.d | |
| new_name: /home/marek/.uim.d | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.config/dconf | |
| Debug 609: expanded: /home/marek/.config/dconf | |
| Debug 620: new_name: /home/marek/.config/dconf | |
| Debug 630: dir: /home/marek | |
| Debug 588: whitelist ${HOME}/.cache/fontconfig | |
| Debug 609: expanded: /home/marek/.cache/fontconfig | |
| Debug 620: new_name: /home/marek/.cache/fontconfig | |
| Debug 630: dir: /home/marek | |
| Debug 588: whitelist ${HOME}/.config/fontconfig | |
| Debug 609: expanded: /home/marek/.config/fontconfig | |
| Debug 620: new_name: /home/marek/.config/fontconfig | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.config/fontconfig | |
| new_name: /home/marek/.config/fontconfig | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.fontconfig | |
| Debug 609: expanded: /home/marek/.fontconfig | |
| Debug 620: new_name: /home/marek/.fontconfig | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.fontconfig | |
| new_name: /home/marek/.fontconfig | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.fonts | |
| Debug 609: expanded: /home/marek/.fonts | |
| Debug 620: new_name: /home/marek/.fonts | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.fonts | |
| new_name: /home/marek/.fonts | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.fonts.conf | |
| Debug 609: expanded: /home/marek/.fonts.conf | |
| Debug 620: new_name: /home/marek/.fonts.conf | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.fonts.conf | |
| new_name: /home/marek/.fonts.conf | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.fonts.conf.d | |
| Debug 609: expanded: /home/marek/.fonts.conf.d | |
| Debug 620: new_name: /home/marek/.fonts.conf.d | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.fonts.conf.d | |
| new_name: /home/marek/.fonts.conf.d | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.fonts.d | |
| Debug 609: expanded: /home/marek/.fonts.d | |
| Debug 620: new_name: /home/marek/.fonts.d | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.fonts.d | |
| new_name: /home/marek/.fonts.d | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.local/share/fonts | |
| Debug 609: expanded: /home/marek/.local/share/fonts | |
| Debug 620: new_name: /home/marek/.local/share/fonts | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.local/share/fonts | |
| new_name: /home/marek/.local/share/fonts | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.pangorc | |
| Debug 609: expanded: /home/marek/.pangorc | |
| Debug 620: new_name: /home/marek/.pangorc | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.pangorc | |
| new_name: /home/marek/.pangorc | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.config/gtk-2.0 | |
| Debug 609: expanded: /home/marek/.config/gtk-2.0 | |
| Debug 620: new_name: /home/marek/.config/gtk-2.0 | |
| Debug 630: dir: /home/marek | |
| Debug 588: whitelist ${HOME}/.config/gtk-3.0 | |
| Debug 609: expanded: /home/marek/.config/gtk-3.0 | |
| Debug 620: new_name: /home/marek/.config/gtk-3.0 | |
| Debug 630: dir: /home/marek | |
| Debug 588: whitelist ${HOME}/.config/gtk-4.0 | |
| Debug 609: expanded: /home/marek/.config/gtk-4.0 | |
| Debug 620: new_name: /home/marek/.config/gtk-4.0 | |
| Debug 630: dir: /home/marek | |
| Debug 588: whitelist ${HOME}/.config/gtkrc | |
| Debug 609: expanded: /home/marek/.config/gtkrc | |
| Debug 620: new_name: /home/marek/.config/gtkrc | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.config/gtkrc | |
| new_name: /home/marek/.config/gtkrc | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.config/gtkrc-2.0 | |
| Debug 609: expanded: /home/marek/.config/gtkrc-2.0 | |
| Debug 620: new_name: /home/marek/.config/gtkrc-2.0 | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.config/gtkrc-2.0 | |
| new_name: /home/marek/.config/gtkrc-2.0 | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.gnome2 | |
| Debug 609: expanded: /home/marek/.gnome2 | |
| Debug 620: new_name: /home/marek/.gnome2 | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.gnome2 | |
| new_name: /home/marek/.gnome2 | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.gnome2-private | |
| Debug 609: expanded: /home/marek/.gnome2-private | |
| Debug 620: new_name: /home/marek/.gnome2-private | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.gnome2-private | |
| new_name: /home/marek/.gnome2-private | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.gtk-2.0 | |
| Debug 609: expanded: /home/marek/.gtk-2.0 | |
| Debug 620: new_name: /home/marek/.gtk-2.0 | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.gtk-2.0 | |
| new_name: /home/marek/.gtk-2.0 | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.gtkrc | |
| Debug 609: expanded: /home/marek/.gtkrc | |
| Debug 620: new_name: /home/marek/.gtkrc | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.gtkrc | |
| new_name: /home/marek/.gtkrc | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.gtkrc-2.0 | |
| Debug 609: expanded: /home/marek/.gtkrc-2.0 | |
| Debug 620: new_name: /home/marek/.gtkrc-2.0 | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.gtkrc-2.0 | |
| new_name: /home/marek/.gtkrc-2.0 | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.kde/share/config/gtkrc | |
| Debug 609: expanded: /home/marek/.kde/share/config/gtkrc | |
| Debug 620: new_name: /home/marek/.kde/share/config/gtkrc | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.kde/share/config/gtkrc | |
| new_name: /home/marek/.kde/share/config/gtkrc | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.kde/share/config/gtkrc-2.0 | |
| Debug 609: expanded: /home/marek/.kde/share/config/gtkrc-2.0 | |
| Debug 620: new_name: /home/marek/.kde/share/config/gtkrc-2.0 | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.kde/share/config/gtkrc-2.0 | |
| new_name: /home/marek/.kde/share/config/gtkrc-2.0 | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.kde4/share/config/gtkrc | |
| Debug 609: expanded: /home/marek/.kde4/share/config/gtkrc | |
| Debug 620: new_name: /home/marek/.kde4/share/config/gtkrc | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.kde4/share/config/gtkrc | |
| new_name: /home/marek/.kde4/share/config/gtkrc | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.kde4/share/config/gtkrc-2.0 | |
| Debug 609: expanded: /home/marek/.kde4/share/config/gtkrc-2.0 | |
| Debug 620: new_name: /home/marek/.kde4/share/config/gtkrc-2.0 | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.kde4/share/config/gtkrc-2.0 | |
| new_name: /home/marek/.kde4/share/config/gtkrc-2.0 | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.local/share/themes | |
| Debug 609: expanded: /home/marek/.local/share/themes | |
| Debug 620: new_name: /home/marek/.local/share/themes | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.local/share/themes | |
| new_name: /home/marek/.local/share/themes | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.themes | |
| Debug 609: expanded: /home/marek/.themes | |
| Debug 620: new_name: /home/marek/.themes | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.themes | |
| new_name: /home/marek/.themes | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.cache/kioexec/krun | |
| Debug 609: expanded: /home/marek/.cache/kioexec/krun | |
| Debug 620: new_name: /home/marek/.cache/kioexec/krun | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.cache/kioexec/krun | |
| new_name: /home/marek/.cache/kioexec/krun | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.config/Kvantum | |
| Debug 609: expanded: /home/marek/.config/Kvantum | |
| Debug 620: new_name: /home/marek/.config/Kvantum | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.config/Kvantum | |
| new_name: /home/marek/.config/Kvantum | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.config/Trolltech.conf | |
| Debug 609: expanded: /home/marek/.config/Trolltech.conf | |
| Debug 620: new_name: /home/marek/.config/Trolltech.conf | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.config/Trolltech.conf | |
| new_name: /home/marek/.config/Trolltech.conf | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.config/QtProject.conf | |
| Debug 609: expanded: /home/marek/.config/QtProject.conf | |
| Debug 620: new_name: /home/marek/.config/QtProject.conf | |
| Debug 630: dir: /home/marek | |
| Debug 588: whitelist ${HOME}/.config/kdeglobals | |
| Debug 609: expanded: /home/marek/.config/kdeglobals | |
| Debug 620: new_name: /home/marek/.config/kdeglobals | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.config/kdeglobals | |
| new_name: /home/marek/.config/kdeglobals | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.config/kio_httprc | |
| Debug 609: expanded: /home/marek/.config/kio_httprc | |
| Debug 620: new_name: /home/marek/.config/kio_httprc | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.config/kio_httprc | |
| new_name: /home/marek/.config/kio_httprc | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.config/kioslaverc | |
| Debug 609: expanded: /home/marek/.config/kioslaverc | |
| Debug 620: new_name: /home/marek/.config/kioslaverc | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.config/kioslaverc | |
| new_name: /home/marek/.config/kioslaverc | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.config/ksslcablacklist | |
| Debug 609: expanded: /home/marek/.config/ksslcablacklist | |
| Debug 620: new_name: /home/marek/.config/ksslcablacklist | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.config/ksslcablacklist | |
| new_name: /home/marek/.config/ksslcablacklist | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.config/qt5ct | |
| Debug 609: expanded: /home/marek/.config/qt5ct | |
| Debug 620: new_name: /home/marek/.config/qt5ct | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.config/qt5ct | |
| new_name: /home/marek/.config/qt5ct | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.config/qt6ct | |
| Debug 609: expanded: /home/marek/.config/qt6ct | |
| Debug 620: new_name: /home/marek/.config/qt6ct | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.config/qt6ct | |
| new_name: /home/marek/.config/qt6ct | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.config/qtcurve | |
| Debug 609: expanded: /home/marek/.config/qtcurve | |
| Debug 620: new_name: /home/marek/.config/qtcurve | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.config/qtcurve | |
| new_name: /home/marek/.config/qtcurve | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.kde/share/config/kdeglobals | |
| Debug 609: expanded: /home/marek/.kde/share/config/kdeglobals | |
| Debug 620: new_name: /home/marek/.kde/share/config/kdeglobals | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.kde/share/config/kdeglobals | |
| new_name: /home/marek/.kde/share/config/kdeglobals | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.kde/share/config/kio_httprc | |
| Debug 609: expanded: /home/marek/.kde/share/config/kio_httprc | |
| Debug 620: new_name: /home/marek/.kde/share/config/kio_httprc | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.kde/share/config/kio_httprc | |
| new_name: /home/marek/.kde/share/config/kio_httprc | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.kde/share/config/kioslaverc | |
| Debug 609: expanded: /home/marek/.kde/share/config/kioslaverc | |
| Debug 620: new_name: /home/marek/.kde/share/config/kioslaverc | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.kde/share/config/kioslaverc | |
| new_name: /home/marek/.kde/share/config/kioslaverc | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.kde/share/config/ksslcablacklist | |
| Debug 609: expanded: /home/marek/.kde/share/config/ksslcablacklist | |
| Debug 620: new_name: /home/marek/.kde/share/config/ksslcablacklist | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.kde/share/config/ksslcablacklist | |
| new_name: /home/marek/.kde/share/config/ksslcablacklist | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.kde/share/config/oxygenrc | |
| Debug 609: expanded: /home/marek/.kde/share/config/oxygenrc | |
| Debug 620: new_name: /home/marek/.kde/share/config/oxygenrc | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.kde/share/config/oxygenrc | |
| new_name: /home/marek/.kde/share/config/oxygenrc | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.kde/share/icons | |
| Debug 609: expanded: /home/marek/.kde/share/icons | |
| Debug 620: new_name: /home/marek/.kde/share/icons | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.kde/share/icons | |
| new_name: /home/marek/.kde/share/icons | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.kde4/share/config/kdeglobals | |
| Debug 609: expanded: /home/marek/.kde4/share/config/kdeglobals | |
| Debug 620: new_name: /home/marek/.kde4/share/config/kdeglobals | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.kde4/share/config/kdeglobals | |
| new_name: /home/marek/.kde4/share/config/kdeglobals | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.kde4/share/config/kio_httprc | |
| Debug 609: expanded: /home/marek/.kde4/share/config/kio_httprc | |
| Debug 620: new_name: /home/marek/.kde4/share/config/kio_httprc | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.kde4/share/config/kio_httprc | |
| new_name: /home/marek/.kde4/share/config/kio_httprc | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.kde4/share/config/kioslaverc | |
| Debug 609: expanded: /home/marek/.kde4/share/config/kioslaverc | |
| Debug 620: new_name: /home/marek/.kde4/share/config/kioslaverc | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.kde4/share/config/kioslaverc | |
| new_name: /home/marek/.kde4/share/config/kioslaverc | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.kde4/share/config/ksslcablacklist | |
| Debug 609: expanded: /home/marek/.kde4/share/config/ksslcablacklist | |
| Debug 620: new_name: /home/marek/.kde4/share/config/ksslcablacklist | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.kde4/share/config/ksslcablacklist | |
| new_name: /home/marek/.kde4/share/config/ksslcablacklist | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.kde4/share/config/oxygenrc | |
| Debug 609: expanded: /home/marek/.kde4/share/config/oxygenrc | |
| Debug 620: new_name: /home/marek/.kde4/share/config/oxygenrc | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.kde4/share/config/oxygenrc | |
| new_name: /home/marek/.kde4/share/config/oxygenrc | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.kde4/share/icons | |
| Debug 609: expanded: /home/marek/.kde4/share/icons | |
| Debug 620: new_name: /home/marek/.kde4/share/icons | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.kde4/share/icons | |
| new_name: /home/marek/.kde4/share/icons | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.local/share/qt5ct | |
| Debug 609: expanded: /home/marek/.local/share/qt5ct | |
| Debug 620: new_name: /home/marek/.local/share/qt5ct | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.local/share/qt5ct | |
| new_name: /home/marek/.local/share/qt5ct | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.local/share/qt6ct | |
| Debug 609: expanded: /home/marek/.local/share/qt6ct | |
| Debug 620: new_name: /home/marek/.local/share/qt6ct | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.local/share/qt6ct | |
| new_name: /home/marek/.local/share/qt6ct | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${HOME}/.nix-profile | |
| Debug 609: expanded: /home/marek/.nix-profile | |
| Debug 620: new_name: /home/marek/.nix-profile | |
| Debug 630: dir: /home/marek | |
| Removed path: whitelist ${HOME}/.nix-profile | |
| new_name: /home/marek/.nix-profile | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /var/lib/aspell | |
| Debug 609: expanded: /var/lib/aspell | |
| Debug 620: new_name: /var/lib/aspell | |
| Debug 630: dir: /var | |
| Adding whitelist top level directory /var | |
| Removed path: whitelist /var/lib/aspell | |
| new_name: /var/lib/aspell | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /var/lib/ca-certificates | |
| Debug 609: expanded: /var/lib/ca-certificates | |
| Debug 620: new_name: /var/lib/ca-certificates | |
| Debug 630: dir: /var | |
| Removed path: whitelist /var/lib/ca-certificates | |
| new_name: /var/lib/ca-certificates | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /var/lib/dbus | |
| Debug 609: expanded: /var/lib/dbus | |
| Debug 620: new_name: /var/lib/dbus | |
| Debug 630: dir: /var | |
| Debug 588: whitelist /var/lib/menu-xdg | |
| Debug 609: expanded: /var/lib/menu-xdg | |
| Debug 620: new_name: /var/lib/menu-xdg | |
| Debug 630: dir: /var | |
| Removed path: whitelist /var/lib/menu-xdg | |
| new_name: /var/lib/menu-xdg | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /var/lib/uim | |
| Debug 609: expanded: /var/lib/uim | |
| Debug 620: new_name: /var/lib/uim | |
| Debug 630: dir: /var | |
| Removed path: whitelist /var/lib/uim | |
| new_name: /var/lib/uim | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /var/cache/fontconfig | |
| Debug 609: expanded: /var/cache/fontconfig | |
| Debug 620: new_name: /var/cache/fontconfig | |
| Debug 630: dir: /var | |
| Debug 588: whitelist /var/tmp | |
| Debug 609: expanded: /var/tmp | |
| Debug 620: new_name: /var/tmp | |
| Debug 630: dir: /var | |
| Debug 588: whitelist /var/run | |
| Debug 609: expanded: /var/run | |
| Debug 620: new_name: /var/run | |
| Debug 630: dir: /var | |
| Debug 588: whitelist /var/lock | |
| Debug 609: expanded: /var/lock | |
| Debug 620: new_name: /var/lock | |
| Debug 630: dir: /var | |
| Debug 588: whitelist ${RUNUSER}/bus | |
| Debug 609: expanded: /run/user/1000/bus | |
| Debug 620: new_name: /run/user/1000/bus | |
| Debug 630: dir: /run/user/1000 | |
| Adding whitelist top level directory /run/user/1000 | |
| Debug 588: whitelist ${RUNUSER}/dconf | |
| Debug 609: expanded: /run/user/1000/dconf | |
| Debug 620: new_name: /run/user/1000/dconf | |
| Debug 630: dir: /run/user/1000 | |
| Debug 588: whitelist ${RUNUSER}/gdm/Xauthority | |
| Debug 609: expanded: /run/user/1000/gdm/Xauthority | |
| Debug 620: new_name: /run/user/1000/gdm/Xauthority | |
| Debug 630: dir: /run/user/1000 | |
| Removed path: whitelist ${RUNUSER}/gdm/Xauthority | |
| new_name: /run/user/1000/gdm/Xauthority | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${RUNUSER}/ICEauthority | |
| Debug 609: expanded: /run/user/1000/ICEauthority | |
| Debug 620: new_name: /run/user/1000/ICEauthority | |
| Debug 630: dir: /run/user/1000 | |
| Debug 588: whitelist ${RUNUSER}/.mutter-Xwaylandauth.* | |
| Debug 609: expanded: /run/user/1000/.mutter-Xwaylandauth.* | |
| Debug 620: new_name: /run/user/1000/.mutter-Xwaylandauth.* | |
| Debug 630: dir: /run/user/1000 | |
| Removed path: whitelist ${RUNUSER}/.mutter-Xwaylandauth.* | |
| new_name: /run/user/1000/.mutter-Xwaylandauth.* | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${RUNUSER}/pulse/native | |
| Debug 609: expanded: /run/user/1000/pulse/native | |
| Debug 620: new_name: /run/user/1000/pulse/native | |
| Debug 630: dir: /run/user/1000 | |
| Debug 588: whitelist ${RUNUSER}/pipewire-? | |
| Debug 609: expanded: /run/user/1000/pipewire-? | |
| Debug 620: new_name: /run/user/1000/pipewire-? | |
| Debug 630: dir: /run/user/1000 | |
| Removed path: whitelist ${RUNUSER}/pipewire-? | |
| new_name: /run/user/1000/pipewire-? | |
| realpath: (null) | |
| No such file or directory | |
| Adding new profile command: whitelist /run/user/1000/pipewire-0 | |
| Debug 588: whitelist ${RUNUSER}/wayland-? | |
| Debug 609: expanded: /run/user/1000/wayland-? | |
| Debug 620: new_name: /run/user/1000/wayland-? | |
| Debug 630: dir: /run/user/1000 | |
| Removed path: whitelist ${RUNUSER}/wayland-? | |
| new_name: /run/user/1000/wayland-? | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${RUNUSER}/xauth_* | |
| Debug 609: expanded: /run/user/1000/xauth_* | |
| Debug 620: new_name: /run/user/1000/xauth_* | |
| Debug 630: dir: /run/user/1000 | |
| Removed path: whitelist ${RUNUSER}/xauth_* | |
| new_name: /run/user/1000/xauth_* | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist ${RUNUSER}/[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]] | |
| Debug 609: expanded: /run/user/1000/[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]] | |
| Debug 620: new_name: /run/user/1000/[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]] | |
| Debug 630: dir: /run/user/1000 | |
| Removed path: whitelist ${RUNUSER}/[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]] | |
| new_name: /run/user/1000/[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]]-[[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]][[:xdigit:]] | |
| realpath: (null) | |
| File name too long | |
| Debug 588: whitelist /usr/share/alsa | |
| Debug 609: expanded: /usr/share/alsa | |
| Debug 620: new_name: /usr/share/alsa | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/applications | |
| Debug 609: expanded: /usr/share/applications | |
| Debug 620: new_name: /usr/share/applications | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/ca-certificates | |
| Debug 609: expanded: /usr/share/ca-certificates | |
| Debug 620: new_name: /usr/share/ca-certificates | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/crypto-policies | |
| Debug 609: expanded: /usr/share/crypto-policies | |
| Debug 620: new_name: /usr/share/crypto-policies | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/crypto-policies | |
| new_name: /usr/share/crypto-policies | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/cursors | |
| Debug 609: expanded: /usr/share/cursors | |
| Debug 620: new_name: /usr/share/cursors | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/cursors | |
| new_name: /usr/share/cursors | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/dconf | |
| Debug 609: expanded: /usr/share/dconf | |
| Debug 620: new_name: /usr/share/dconf | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/dconf | |
| new_name: /usr/share/dconf | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/distro-info | |
| Debug 609: expanded: /usr/share/distro-info | |
| Debug 620: new_name: /usr/share/distro-info | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/distro-info | |
| new_name: /usr/share/distro-info | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/drirc.d | |
| Debug 609: expanded: /usr/share/drirc.d | |
| Debug 620: new_name: /usr/share/drirc.d | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/egl | |
| Debug 609: expanded: /usr/share/egl | |
| Debug 620: new_name: /usr/share/egl | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/egl | |
| new_name: /usr/share/egl | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/enchant | |
| Debug 609: expanded: /usr/share/enchant | |
| Debug 620: new_name: /usr/share/enchant | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/enchant | |
| new_name: /usr/share/enchant | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/enchant-2 | |
| Debug 609: expanded: /usr/share/enchant-2 | |
| Debug 620: new_name: /usr/share/enchant-2 | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/file | |
| Debug 609: expanded: /usr/share/file | |
| Debug 620: new_name: /usr/share/file | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/fontconfig | |
| Debug 609: expanded: /usr/share/fontconfig | |
| Debug 620: new_name: /usr/share/fontconfig | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/fonts | |
| Debug 609: expanded: /usr/share/fonts | |
| Debug 620: new_name: /usr/share/fonts | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/fonts-config | |
| Debug 609: expanded: /usr/share/fonts-config | |
| Debug 620: new_name: /usr/share/fonts-config | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/fonts-config | |
| new_name: /usr/share/fonts-config | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/gir-1.0 | |
| Debug 609: expanded: /usr/share/gir-1.0 | |
| Debug 620: new_name: /usr/share/gir-1.0 | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/gjs-1.0 | |
| Debug 609: expanded: /usr/share/gjs-1.0 | |
| Debug 620: new_name: /usr/share/gjs-1.0 | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/gjs-1.0 | |
| new_name: /usr/share/gjs-1.0 | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/glib-2.0 | |
| Debug 609: expanded: /usr/share/glib-2.0 | |
| Debug 620: new_name: /usr/share/glib-2.0 | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/glvnd | |
| Debug 609: expanded: /usr/share/glvnd | |
| Debug 620: new_name: /usr/share/glvnd | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/gtk-2.0 | |
| Debug 609: expanded: /usr/share/gtk-2.0 | |
| Debug 620: new_name: /usr/share/gtk-2.0 | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/gtk-3.0 | |
| Debug 609: expanded: /usr/share/gtk-3.0 | |
| Debug 620: new_name: /usr/share/gtk-3.0 | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/gtk-engines | |
| Debug 609: expanded: /usr/share/gtk-engines | |
| Debug 620: new_name: /usr/share/gtk-engines | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/gtk-engines | |
| new_name: /usr/share/gtk-engines | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/gtksourceview-3.0 | |
| Debug 609: expanded: /usr/share/gtksourceview-3.0 | |
| Debug 620: new_name: /usr/share/gtksourceview-3.0 | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/gtksourceview-3.0 | |
| new_name: /usr/share/gtksourceview-3.0 | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/gtksourceview-4 | |
| Debug 609: expanded: /usr/share/gtksourceview-4 | |
| Debug 620: new_name: /usr/share/gtksourceview-4 | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/hunspell | |
| Debug 609: expanded: /usr/share/hunspell | |
| Debug 620: new_name: /usr/share/hunspell | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/hwdata | |
| Debug 609: expanded: /usr/share/hwdata | |
| Debug 620: new_name: /usr/share/hwdata | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/icons | |
| Debug 609: expanded: /usr/share/icons | |
| Debug 620: new_name: /usr/share/icons | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/icu | |
| Debug 609: expanded: /usr/share/icu | |
| Debug 620: new_name: /usr/share/icu | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/knotifications5 | |
| Debug 609: expanded: /usr/share/knotifications5 | |
| Debug 620: new_name: /usr/share/knotifications5 | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/kservices5 | |
| Debug 609: expanded: /usr/share/kservices5 | |
| Debug 620: new_name: /usr/share/kservices5 | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/Kvantum | |
| Debug 609: expanded: /usr/share/Kvantum | |
| Debug 620: new_name: /usr/share/Kvantum | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/Kvantum | |
| new_name: /usr/share/Kvantum | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/kxmlgui5 | |
| Debug 609: expanded: /usr/share/kxmlgui5 | |
| Debug 620: new_name: /usr/share/kxmlgui5 | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/kxmlgui5 | |
| new_name: /usr/share/kxmlgui5 | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/libdrm | |
| Debug 609: expanded: /usr/share/libdrm | |
| Debug 620: new_name: /usr/share/libdrm | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/libthai | |
| Debug 609: expanded: /usr/share/libthai | |
| Debug 620: new_name: /usr/share/libthai | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/locale | |
| Debug 609: expanded: /usr/share/locale | |
| Debug 620: new_name: /usr/share/locale | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/mime | |
| Debug 609: expanded: /usr/share/mime | |
| Debug 620: new_name: /usr/share/mime | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/misc | |
| Debug 609: expanded: /usr/share/misc | |
| Debug 620: new_name: /usr/share/misc | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/Modules | |
| Debug 609: expanded: /usr/share/Modules | |
| Debug 620: new_name: /usr/share/Modules | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/Modules | |
| new_name: /usr/share/Modules | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/myspell | |
| Debug 609: expanded: /usr/share/myspell | |
| Debug 620: new_name: /usr/share/myspell | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/p11-kit | |
| Debug 609: expanded: /usr/share/p11-kit | |
| Debug 620: new_name: /usr/share/p11-kit | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/perl | |
| Debug 609: expanded: /usr/share/perl | |
| Debug 620: new_name: /usr/share/perl | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/perl | |
| new_name: /usr/share/perl | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/perl5 | |
| Debug 609: expanded: /usr/share/perl5 | |
| Debug 620: new_name: /usr/share/perl5 | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/pipewire | |
| Debug 609: expanded: /usr/share/pipewire | |
| Debug 620: new_name: /usr/share/pipewire | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/pixmaps | |
| Debug 609: expanded: /usr/share/pixmaps | |
| Debug 620: new_name: /usr/share/pixmaps | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/pki | |
| Debug 609: expanded: /usr/share/pki | |
| Debug 620: new_name: /usr/share/pki | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/pki | |
| new_name: /usr/share/pki | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/plasma | |
| Debug 609: expanded: /usr/share/plasma | |
| Debug 620: new_name: /usr/share/plasma | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/plasma | |
| new_name: /usr/share/plasma | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/publicsuffix | |
| Debug 609: expanded: /usr/share/publicsuffix | |
| Debug 620: new_name: /usr/share/publicsuffix | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/publicsuffix | |
| new_name: /usr/share/publicsuffix | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/qt | |
| Debug 609: expanded: /usr/share/qt | |
| Debug 620: new_name: /usr/share/qt | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/qt4 | |
| Debug 609: expanded: /usr/share/qt4 | |
| Debug 620: new_name: /usr/share/qt4 | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/qt4 | |
| new_name: /usr/share/qt4 | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/qt5 | |
| Debug 609: expanded: /usr/share/qt5 | |
| Debug 620: new_name: /usr/share/qt5 | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/qt5 | |
| new_name: /usr/share/qt5 | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/qt5ct | |
| Debug 609: expanded: /usr/share/qt5ct | |
| Debug 620: new_name: /usr/share/qt5ct | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/qt5ct | |
| new_name: /usr/share/qt5ct | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/qt6 | |
| Debug 609: expanded: /usr/share/qt6 | |
| Debug 620: new_name: /usr/share/qt6 | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/qt6ct | |
| Debug 609: expanded: /usr/share/qt6ct | |
| Debug 620: new_name: /usr/share/qt6ct | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/qt6ct | |
| new_name: /usr/share/qt6ct | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/sounds | |
| Debug 609: expanded: /usr/share/sounds | |
| Debug 620: new_name: /usr/share/sounds | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/tcl8.6 | |
| Debug 609: expanded: /usr/share/tcl8.6 | |
| Debug 620: new_name: /usr/share/tcl8.6 | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/tcl8.6 | |
| new_name: /usr/share/tcl8.6 | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/tcltk | |
| Debug 609: expanded: /usr/share/tcltk | |
| Debug 620: new_name: /usr/share/tcltk | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/tcltk | |
| new_name: /usr/share/tcltk | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/terminfo | |
| Debug 609: expanded: /usr/share/terminfo | |
| Debug 620: new_name: /usr/share/terminfo | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/texlive | |
| Debug 609: expanded: /usr/share/texlive | |
| Debug 620: new_name: /usr/share/texlive | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/texlive | |
| new_name: /usr/share/texlive | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/texmf | |
| Debug 609: expanded: /usr/share/texmf | |
| Debug 620: new_name: /usr/share/texmf | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/texmf | |
| new_name: /usr/share/texmf | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/themes | |
| Debug 609: expanded: /usr/share/themes | |
| Debug 620: new_name: /usr/share/themes | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/thumbnail.so | |
| Debug 609: expanded: /usr/share/thumbnail.so | |
| Debug 620: new_name: /usr/share/thumbnail.so | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/thumbnail.so | |
| new_name: /usr/share/thumbnail.so | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/uim | |
| Debug 609: expanded: /usr/share/uim | |
| Debug 620: new_name: /usr/share/uim | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/uim | |
| new_name: /usr/share/uim | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/vulkan | |
| Debug 609: expanded: /usr/share/vulkan | |
| Debug 620: new_name: /usr/share/vulkan | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/X11 | |
| Debug 609: expanded: /usr/share/X11 | |
| Debug 620: new_name: /usr/share/X11 | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/xml | |
| Debug 609: expanded: /usr/share/xml | |
| Debug 620: new_name: /usr/share/xml | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /usr/share/zenity | |
| Debug 609: expanded: /usr/share/zenity | |
| Debug 620: new_name: /usr/share/zenity | |
| Debug 630: dir: /usr/share | |
| Removed path: whitelist /usr/share/zenity | |
| new_name: /usr/share/zenity | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /usr/share/zoneinfo | |
| Debug 609: expanded: /usr/share/zoneinfo | |
| Debug 620: new_name: /usr/share/zoneinfo | |
| Debug 630: dir: /usr/share | |
| Debug 588: whitelist /tmp/.X11-unix | |
| Debug 609: expanded: /tmp/.X11-unix | |
| Debug 620: new_name: /tmp/.X11-unix | |
| Debug 630: dir: /tmp | |
| Adding whitelist top level directory /tmp | |
| Debug 588: whitelist /tmp/sndio | |
| Debug 609: expanded: /tmp/sndio | |
| Debug 620: new_name: /tmp/sndio | |
| Debug 630: dir: /tmp | |
| Removed path: whitelist /tmp/sndio | |
| new_name: /tmp/sndio | |
| realpath: (null) | |
| No such file or directory | |
| Debug 588: whitelist /run/user/1000/pipewire-0 | |
| Debug 609: expanded: /run/user/1000/pipewire-0 | |
| Debug 620: new_name: /run/user/1000/pipewire-0 | |
| Debug 630: dir: /run/user/1000 | |
| Mounting tmpfs on /opt, check owner: no | |
| 1135 1042 0:106 / /opt rw,nosuid,nodev,noatime,nodiratime - tmpfs tmpfs rw,mode=755,inode64 | |
| mountid=1135 fsname=/ dir=/opt fstype=tmpfs | |
| Mounting tmpfs on /usr/share, check owner: no | |
| 1136 1076 0:107 / /usr/share rw,nosuid,nodev,noatime,nodiratime - tmpfs tmpfs rw,mode=755,inode64 | |
| mountid=1136 fsname=/ dir=/usr/share fstype=tmpfs | |
| Mounting tmpfs on /var, check owner: no | |
| 1137 1075 0:124 / /var rw,nosuid,nodev,noexec,noatime,nodiratime - tmpfs tmpfs rw,mode=755,inode64 | |
| mountid=1137 fsname=/ dir=/var fstype=tmpfs | |
| Mounting tmpfs on /tmp, check owner: no | |
| 1138 1067 0:125 / /tmp rw,nosuid,nodev,relatime - tmpfs tmpfs rw,inode64 | |
| mountid=1138 fsname=/ dir=/tmp fstype=tmpfs | |
| Drop privileges: pid 94, uid 1000, gid 1000, force_nogroups 0 | |
| nogroups command not ignored | |
| No supplementary groups | |
| Mounting a new /root directory | |
| Mounting a new /home directory | |
| Create a new user directory | |
| Drop privileges: pid 95, uid 1000, gid 1000, force_nogroups 0 | |
| nogroups command not ignored | |
| No supplementary groups | |
| Mounting tmpfs on /run/user/1000, check owner: no | |
| 1142 1085 0:130 / /run/user/1000 rw,nosuid,nodev,relatime - tmpfs tmpfs rw,mode=700,uid=1000,gid=1000,inode64 | |
| mountid=1142 fsname=/ dir=/run/user/1000 fstype=tmpfs | |
| Whitelisting /home/marek/Downloads | |
| 1143 1141 0:26 /@home/marek/Downloads /home/marek/Downloads rw,noatime,nodiratime master:42 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=257,subvol=/@home | |
| mountid=1143 fsname=/@home/marek/Downloads dir=/home/marek/Downloads fstype=btrfs | |
| Whitelisting /home/marek/.config/torbrowser | |
| 1144 1141 0:26 /@home/marek/.config/torbrowser /home/marek/.config/torbrowser rw,noatime,nodiratime master:42 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=257,subvol=/@home | |
| mountid=1144 fsname=/@home/marek/.config/torbrowser dir=/home/marek/.config/torbrowser fstype=btrfs | |
| Whitelisting /home/marek/.local/share/torbrowser | |
| 1145 1141 0:26 /@home/marek/.local/share/torbrowser /home/marek/.local/share/torbrowser rw,noatime,nodiratime master:42 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=257,subvol=/@home | |
| mountid=1145 fsname=/@home/marek/.local/share/torbrowser dir=/home/marek/.local/share/torbrowser fstype=btrfs | |
| Whitelisting /usr/share/torbrowser-launcher | |
| 1146 1136 0:26 /@/usr/share/torbrowser-launcher /usr/share/torbrowser-launcher ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1146 fsname=/@/usr/share/torbrowser-launcher dir=/usr/share/torbrowser-launcher fstype=btrfs | |
| Whitelisting /home/marek/.config/mimeapps.list | |
| 1147 1141 0:26 /@home/marek/.config/mimeapps.list /home/marek/.config/mimeapps.list rw,noatime,nodiratime master:42 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=257,subvol=/@home | |
| mountid=1147 fsname=/@home/marek/.config/mimeapps.list dir=/home/marek/.config/mimeapps.list fstype=btrfs | |
| Whitelisting /home/marek/.local/share/applications | |
| 1148 1141 0:26 /@home/marek/.local/share/applications /home/marek/.local/share/applications rw,noatime,nodiratime master:42 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=257,subvol=/@home | |
| mountid=1148 fsname=/@home/marek/.local/share/applications dir=/home/marek/.local/share/applications fstype=btrfs | |
| Whitelisting /home/marek/.local/share/icons | |
| 1149 1141 0:26 /@home/marek/.local/share/icons /home/marek/.local/share/icons rw,noatime,nodiratime master:42 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=257,subvol=/@home | |
| mountid=1149 fsname=/@home/marek/.local/share/icons dir=/home/marek/.local/share/icons fstype=btrfs | |
| Whitelisting /home/marek/.config/dconf | |
| 1150 1141 0:26 /@home/marek/.config/dconf /home/marek/.config/dconf rw,noatime,nodiratime master:42 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=257,subvol=/@home | |
| mountid=1150 fsname=/@home/marek/.config/dconf dir=/home/marek/.config/dconf fstype=btrfs | |
| Whitelisting /home/marek/.cache/fontconfig | |
| 1151 1141 0:26 /@home/marek/.cache/fontconfig /home/marek/.cache/fontconfig rw,noatime,nodiratime master:42 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=257,subvol=/@home | |
| mountid=1151 fsname=/@home/marek/.cache/fontconfig dir=/home/marek/.cache/fontconfig fstype=btrfs | |
| Whitelisting /home/marek/.config/gtk-2.0 | |
| 1152 1141 0:26 /@home/marek/.config/gtk-2.0 /home/marek/.config/gtk-2.0 rw,noatime,nodiratime master:42 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=257,subvol=/@home | |
| mountid=1152 fsname=/@home/marek/.config/gtk-2.0 dir=/home/marek/.config/gtk-2.0 fstype=btrfs | |
| Whitelisting /home/marek/.config/gtk-3.0 | |
| 1153 1141 0:26 /@home/marek/.config/gtk-3.0 /home/marek/.config/gtk-3.0 rw,noatime,nodiratime master:42 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=257,subvol=/@home | |
| mountid=1153 fsname=/@home/marek/.config/gtk-3.0 dir=/home/marek/.config/gtk-3.0 fstype=btrfs | |
| Whitelisting /home/marek/.config/gtk-4.0 | |
| 1154 1141 0:26 /@home/marek/.config/gtk-4.0 /home/marek/.config/gtk-4.0 rw,noatime,nodiratime master:42 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=257,subvol=/@home | |
| mountid=1154 fsname=/@home/marek/.config/gtk-4.0 dir=/home/marek/.config/gtk-4.0 fstype=btrfs | |
| Whitelisting /home/marek/.config/QtProject.conf | |
| 1155 1141 0:26 /@home/marek/.config/QtProject.conf /home/marek/.config/QtProject.conf rw,noatime,nodiratime master:42 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=257,subvol=/@home | |
| mountid=1155 fsname=/@home/marek/.config/QtProject.conf dir=/home/marek/.config/QtProject.conf fstype=btrfs | |
| Whitelisting /var/lib/dbus | |
| 1156 1137 0:26 /@/var/lib/dbus /var/lib/dbus ro,nosuid,nodev,noexec,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1156 fsname=/@/var/lib/dbus dir=/var/lib/dbus fstype=btrfs | |
| Whitelisting /var/cache/fontconfig | |
| 1157 1137 0:26 /@/var/cache/fontconfig /var/cache/fontconfig ro,nosuid,nodev,noexec,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1157 fsname=/@/var/cache/fontconfig dir=/var/cache/fontconfig fstype=btrfs | |
| Whitelisting /var/tmp | |
| 1158 1137 0:78 / /var/tmp rw,nosuid,nodev,noexec - tmpfs tmpfs rw,inode64 | |
| mountid=1158 fsname=/ dir=/var/tmp fstype=tmpfs | |
| Created symbolic link /var/run -> /run | |
| Created symbolic link /var/lock -> /run/lock | |
| Whitelisting /run/user/1000/bus | |
| 1159 1142 0:24 /firejail/firejail.ro.file /run/user/1000/bus ro,nosuid,nodev,relatime master:12 - tmpfs run rw,mode=755,inode64 | |
| mountid=1159 fsname=/firejail/firejail.ro.file dir=/run/user/1000/bus fstype=tmpfs | |
| Whitelisting /run/user/1000/dconf | |
| 1160 1142 0:61 /dconf /run/user/1000/dconf rw,nosuid,nodev,relatime master:484 - tmpfs tmpfs rw,size=3152292k,nr_inodes=788073,mode=700,uid=1000,gid=1000,inode64 | |
| mountid=1160 fsname=/dconf dir=/run/user/1000/dconf fstype=tmpfs | |
| Whitelisting /run/user/1000/ICEauthority | |
| 1161 1142 0:61 /ICEauthority /run/user/1000/ICEauthority rw,nosuid,nodev,relatime master:484 - tmpfs tmpfs rw,size=3152292k,nr_inodes=788073,mode=700,uid=1000,gid=1000,inode64 | |
| mountid=1161 fsname=/ICEauthority dir=/run/user/1000/ICEauthority fstype=tmpfs | |
| Whitelisting /run/user/1000/pulse/native | |
| 1162 1142 0:61 /pulse/native /run/user/1000/pulse/native rw,nosuid,nodev,relatime master:484 - tmpfs tmpfs rw,size=3152292k,nr_inodes=788073,mode=700,uid=1000,gid=1000,inode64 | |
| mountid=1162 fsname=/pulse/native dir=/run/user/1000/pulse/native fstype=tmpfs | |
| Whitelisting /usr/share/alsa | |
| 1163 1136 0:26 /@/usr/share/alsa /usr/share/alsa ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1163 fsname=/@/usr/share/alsa dir=/usr/share/alsa fstype=btrfs | |
| Whitelisting /usr/share/applications | |
| 1164 1136 0:26 /@/usr/share/applications /usr/share/applications ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1164 fsname=/@/usr/share/applications dir=/usr/share/applications fstype=btrfs | |
| Whitelisting /usr/share/ca-certificates | |
| 1165 1136 0:26 /@/usr/share/ca-certificates /usr/share/ca-certificates ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1165 fsname=/@/usr/share/ca-certificates dir=/usr/share/ca-certificates fstype=btrfs | |
| Whitelisting /usr/share/drirc.d | |
| 1166 1136 0:26 /@/usr/share/drirc.d /usr/share/drirc.d ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1166 fsname=/@/usr/share/drirc.d dir=/usr/share/drirc.d fstype=btrfs | |
| Whitelisting /usr/share/enchant-2 | |
| 1167 1136 0:26 /@/usr/share/enchant-2 /usr/share/enchant-2 ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1167 fsname=/@/usr/share/enchant-2 dir=/usr/share/enchant-2 fstype=btrfs | |
| Whitelisting /usr/share/file | |
| 1168 1136 0:26 /@/usr/share/file /usr/share/file ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1168 fsname=/@/usr/share/file dir=/usr/share/file fstype=btrfs | |
| Whitelisting /usr/share/fontconfig | |
| 1169 1136 0:26 /@/usr/share/fontconfig /usr/share/fontconfig ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1169 fsname=/@/usr/share/fontconfig dir=/usr/share/fontconfig fstype=btrfs | |
| Whitelisting /usr/share/fonts | |
| 1170 1136 0:26 /@/usr/share/fonts /usr/share/fonts ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1170 fsname=/@/usr/share/fonts dir=/usr/share/fonts fstype=btrfs | |
| Whitelisting /usr/share/gir-1.0 | |
| 1171 1136 0:26 /@/usr/share/gir-1.0 /usr/share/gir-1.0 ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1171 fsname=/@/usr/share/gir-1.0 dir=/usr/share/gir-1.0 fstype=btrfs | |
| Whitelisting /usr/share/glib-2.0 | |
| 1172 1136 0:26 /@/usr/share/glib-2.0 /usr/share/glib-2.0 ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1172 fsname=/@/usr/share/glib-2.0 dir=/usr/share/glib-2.0 fstype=btrfs | |
| Whitelisting /usr/share/glvnd | |
| 1173 1136 0:26 /@/usr/share/glvnd /usr/share/glvnd ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1173 fsname=/@/usr/share/glvnd dir=/usr/share/glvnd fstype=btrfs | |
| Whitelisting /usr/share/gtk-2.0 | |
| 1174 1136 0:26 /@/usr/share/gtk-2.0 /usr/share/gtk-2.0 ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1174 fsname=/@/usr/share/gtk-2.0 dir=/usr/share/gtk-2.0 fstype=btrfs | |
| Whitelisting /usr/share/gtk-3.0 | |
| 1175 1136 0:26 /@/usr/share/gtk-3.0 /usr/share/gtk-3.0 ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1175 fsname=/@/usr/share/gtk-3.0 dir=/usr/share/gtk-3.0 fstype=btrfs | |
| Whitelisting /usr/share/gtksourceview-4 | |
| 1176 1136 0:26 /@/usr/share/gtksourceview-4 /usr/share/gtksourceview-4 ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1176 fsname=/@/usr/share/gtksourceview-4 dir=/usr/share/gtksourceview-4 fstype=btrfs | |
| Whitelisting /usr/share/hunspell | |
| 1177 1136 0:26 /@/usr/share/hunspell /usr/share/hunspell ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1177 fsname=/@/usr/share/hunspell dir=/usr/share/hunspell fstype=btrfs | |
| Whitelisting /usr/share/hwdata | |
| 1178 1136 0:26 /@/usr/share/hwdata /usr/share/hwdata ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1178 fsname=/@/usr/share/hwdata dir=/usr/share/hwdata fstype=btrfs | |
| Whitelisting /usr/share/icons | |
| 1179 1136 0:26 /@/usr/share/icons /usr/share/icons ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1179 fsname=/@/usr/share/icons dir=/usr/share/icons fstype=btrfs | |
| Whitelisting /usr/share/icu | |
| 1180 1136 0:26 /@/usr/share/icu /usr/share/icu ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1180 fsname=/@/usr/share/icu dir=/usr/share/icu fstype=btrfs | |
| Whitelisting /usr/share/knotifications5 | |
| 1181 1136 0:26 /@/usr/share/knotifications5 /usr/share/knotifications5 ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1181 fsname=/@/usr/share/knotifications5 dir=/usr/share/knotifications5 fstype=btrfs | |
| Whitelisting /usr/share/kservices5 | |
| 1182 1136 0:26 /@/usr/share/kservices5 /usr/share/kservices5 ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1182 fsname=/@/usr/share/kservices5 dir=/usr/share/kservices5 fstype=btrfs | |
| Whitelisting /usr/share/libdrm | |
| 1183 1136 0:26 /@/usr/share/libdrm /usr/share/libdrm ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1183 fsname=/@/usr/share/libdrm dir=/usr/share/libdrm fstype=btrfs | |
| Whitelisting /usr/share/libthai | |
| 1184 1136 0:26 /@/usr/share/libthai /usr/share/libthai ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1184 fsname=/@/usr/share/libthai dir=/usr/share/libthai fstype=btrfs | |
| Whitelisting /usr/share/locale | |
| 1185 1136 0:26 /@/usr/share/locale /usr/share/locale ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1185 fsname=/@/usr/share/locale dir=/usr/share/locale fstype=btrfs | |
| Whitelisting /usr/share/mime | |
| 1186 1136 0:26 /@/usr/share/mime /usr/share/mime ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1186 fsname=/@/usr/share/mime dir=/usr/share/mime fstype=btrfs | |
| Whitelisting /usr/share/misc | |
| 1187 1136 0:26 /@/usr/share/misc /usr/share/misc ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1187 fsname=/@/usr/share/misc dir=/usr/share/misc fstype=btrfs | |
| Whitelisting /usr/share/myspell | |
| 1188 1136 0:26 /@/usr/share/myspell /usr/share/myspell ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1188 fsname=/@/usr/share/myspell dir=/usr/share/myspell fstype=btrfs | |
| Whitelisting /usr/share/p11-kit | |
| 1189 1136 0:26 /@/usr/share/p11-kit /usr/share/p11-kit ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1189 fsname=/@/usr/share/p11-kit dir=/usr/share/p11-kit fstype=btrfs | |
| Whitelisting /usr/share/perl5 | |
| 1190 1136 0:26 /@/usr/share/perl5 /usr/share/perl5 ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1190 fsname=/@/usr/share/perl5 dir=/usr/share/perl5 fstype=btrfs | |
| Whitelisting /usr/share/pipewire | |
| 1191 1136 0:26 /@/usr/share/pipewire /usr/share/pipewire ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1191 fsname=/@/usr/share/pipewire dir=/usr/share/pipewire fstype=btrfs | |
| Whitelisting /usr/share/pixmaps | |
| 1192 1136 0:26 /@/usr/share/pixmaps /usr/share/pixmaps ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1192 fsname=/@/usr/share/pixmaps dir=/usr/share/pixmaps fstype=btrfs | |
| Whitelisting /usr/share/qt | |
| 1193 1136 0:26 /@/usr/share/qt /usr/share/qt ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1193 fsname=/@/usr/share/qt dir=/usr/share/qt fstype=btrfs | |
| Whitelisting /usr/share/qt6 | |
| 1194 1136 0:26 /@/usr/share/qt6 /usr/share/qt6 ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1194 fsname=/@/usr/share/qt6 dir=/usr/share/qt6 fstype=btrfs | |
| Whitelisting /usr/share/sounds | |
| 1195 1136 0:26 /@/usr/share/sounds /usr/share/sounds ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1195 fsname=/@/usr/share/sounds dir=/usr/share/sounds fstype=btrfs | |
| Whitelisting /usr/share/terminfo | |
| 1196 1136 0:26 /@/usr/share/terminfo /usr/share/terminfo ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1196 fsname=/@/usr/share/terminfo dir=/usr/share/terminfo fstype=btrfs | |
| Whitelisting /usr/share/themes | |
| 1197 1136 0:26 /@/usr/share/themes /usr/share/themes ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1197 fsname=/@/usr/share/themes dir=/usr/share/themes fstype=btrfs | |
| Whitelisting /usr/share/vulkan | |
| 1198 1136 0:26 /@/usr/share/vulkan /usr/share/vulkan ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1198 fsname=/@/usr/share/vulkan dir=/usr/share/vulkan fstype=btrfs | |
| Whitelisting /usr/share/X11 | |
| 1199 1136 0:26 /@/usr/share/X11 /usr/share/X11 ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1199 fsname=/@/usr/share/X11 dir=/usr/share/X11 fstype=btrfs | |
| Whitelisting /usr/share/xml | |
| 1200 1136 0:26 /@/usr/share/xml /usr/share/xml ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1200 fsname=/@/usr/share/xml dir=/usr/share/xml fstype=btrfs | |
| Whitelisting /usr/share/zoneinfo | |
| 1201 1136 0:26 /@/usr/share/zoneinfo /usr/share/zoneinfo ro,noatime,nodiratime master:1 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=256,subvol=/@ | |
| mountid=1201 fsname=/@/usr/share/zoneinfo dir=/usr/share/zoneinfo fstype=btrfs | |
| Whitelisting /tmp/.X11-unix | |
| 1202 1138 0:39 /.X11-unix /tmp/.X11-unix rw,nosuid,nodev master:44 - tmpfs tmpfs rw,nr_inodes=1048576,inode64 | |
| mountid=1202 fsname=/.X11-unix dir=/tmp/.X11-unix fstype=tmpfs | |
| Whitelisting /run/user/1000/pipewire-0 | |
| 1203 1142 0:61 /pipewire-0 /run/user/1000/pipewire-0 rw,nosuid,nodev,relatime master:484 - tmpfs tmpfs rw,size=3152292k,nr_inodes=788073,mode=700,uid=1000,gid=1000,inode64 | |
| mountid=1203 fsname=/pipewire-0 dir=/run/user/1000/pipewire-0 fstype=tmpfs | |
| Disable /srv | |
| Disable /sys/class/net | |
| Mounting read-only /home/marek/.Xauthority | |
| 1206 1141 0:129 /marek/.Xauthority /home/marek/.Xauthority ro,nosuid,nodev,noexec - tmpfs tmpfs rw,mode=755,inode64 | |
| mountid=1206 fsname=/marek/.Xauthority dir=/home/marek/.Xauthority fstype=tmpfs | |
| Mounting read-only /home/marek/.config/dconf | |
| 1207 1150 0:26 /@home/marek/.config/dconf /home/marek/.config/dconf ro,noatime,nodiratime master:42 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=257,subvol=/@home | |
| mountid=1207 fsname=/@home/marek/.config/dconf dir=/home/marek/.config/dconf fstype=btrfs | |
| Mounting read-only /home/marek/.local/share/applications | |
| 1208 1148 0:26 /@home/marek/.local/share/applications /home/marek/.local/share/applications ro,noatime,nodiratime master:42 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=257,subvol=/@home | |
| mountid=1208 fsname=/@home/marek/.local/share/applications dir=/home/marek/.local/share/applications fstype=btrfs | |
| Mounting read-only /home/marek/.config/mimeapps.list | |
| 1209 1147 0:26 /@home/marek/.config/mimeapps.list /home/marek/.config/mimeapps.list ro,noatime,nodiratime master:42 - btrfs /dev/mapper/ciel-main rw,nodatasum,nodatacow,ssd,space_cache=v2,autodefrag,subvolid=257,subvol=/@home | |
| mountid=1209 fsname=/@home/marek/.config/mimeapps.list dir=/home/marek/.config/mimeapps.list fstype=btrfs | |
| Warning: /sbin directory link was not blacklisted | |
| Disable /usr/local/sbin | |
| Warning: /usr/sbin directory link was not blacklisted | |
| Warning (blacklisting): cannot open /usr/local/sbin/at: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/busybox: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/chage: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/chfn: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/chsh: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/crontab: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/doas: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/evtest: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/expiry: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/fusermount: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/gksu: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/gksudo: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/gpasswd: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/kdesudo: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/ksu: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/mount: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/mount.ecryptfs_private: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/nc: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/ncat: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/nmap: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/newgidmap: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/newgrp: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/newuidmap: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/ntfs-3g: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/pkexec: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/procmail: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/sg: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/strace: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/su: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/sudo: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/tcpdump: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/umount: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/unix_chkpwd: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/xev: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/xinput: Permission denied | |
| Disable /usr/lib/ssh | |
| Warning (blacklisting): cannot open /usr/local/sbin/passwd: Permission denied | |
| Disable /usr/lib/dbus-1.0/dbus-daemon-launch-helper | |
| Disable /usr/lib/chromium/chrome-sandbox | |
| Warning (blacklisting): cannot open /usr/local/sbin/suexec: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/slock: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/physlock: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/schroot: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/wshowkeys: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/pmount: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/pumount: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/bmon: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/fping: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/fping6: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/hostname: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/mtr: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/mtr-packet: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/netstat: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/nm-online: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/nmcli: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/nmtui: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/nmtui-connect: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/nmtui-edit: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/nmtui-hostname: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/networkctl: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/ss: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/traceroute: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/gnome-terminal: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/gnome-terminal.wrapper: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/kgx: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/lilyterm: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/lxterminal: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/mate-terminal: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/mate-terminal.wrapper: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/pantheon-terminal: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/roxterm: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/roxterm-config: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/terminix: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/tilix: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/urxvtc: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/urxvtcd: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/xfce4-terminal: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/xfce4-terminal.wrapper: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/bwrap: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/snap: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/snapctl: Permission denied | |
| Disable /proc/config.gz | |
| Warning (blacklisting): cannot open /usr/local/sbin/dig: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/dlint: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/dns2tcp: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/dnssec-*: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/dnswalk: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/drill: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/host: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/iodine: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/kdig: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/khost: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/knsupdate: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/ldns-*: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/ldnsd: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/nslookup: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/resolvectl: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/unbound-host: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/ftp: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/ssh: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/telnet: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/clang*: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/lldb*: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/llvm*: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/as: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/cc: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/c++*: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/c8*: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/c9*: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/cpp*: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/g++*: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/gcc*: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/gdb: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/ld: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/*-gcc*: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/*-g++*: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/*-gcc*: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/*-g++*: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/gccgo: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/go: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/gofmt: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/java: Permission denied | |
| Disable /usr/lib/jvm/java-21-openjdk/bin/java (requested /usr/lib/jvm/default/bin/java) | |
| Warning (blacklisting): cannot open /usr/local/sbin/javac: Permission denied | |
| Disable /usr/lib/jvm/java-21-openjdk/bin/javac (requested /usr/lib/jvm/default/bin/javac) | |
| Warning (blacklisting): cannot open /usr/local/sbin/scala: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/scala3: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/scala3-compiler: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/scala3-repl: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/scalac: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/openssl: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/openssl-1.0: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/rust-gdb: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/rust-lldb: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/rustc: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/tcc: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/x86_64-tcc: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/valgrind*: Permission denied | |
| Disable /usr/src | |
| Disable /usr/local/src | |
| Disable /usr/include | |
| Disable /usr/local/include | |
| Mounting noexec /run/user/1000 | |
| 1227 1221 0:61 /pipewire-0 /run/user/1000/pipewire-0 rw,nosuid,nodev,relatime master:484 - tmpfs tmpfs rw,size=3152292k,nr_inodes=788073,mode=700,uid=1000,gid=1000,inode64 | |
| mountid=1227 fsname=/pipewire-0 dir=/run/user/1000/pipewire-0 fstype=tmpfs | |
| Mounting noexec /run/user/1000/bus | |
| 1228 1222 0:24 /firejail/firejail.ro.file /run/user/1000/bus ro,nosuid,nodev,noexec,relatime master:12 - tmpfs run rw,mode=755,inode64 | |
| mountid=1228 fsname=/firejail/firejail.ro.file dir=/run/user/1000/bus fstype=tmpfs | |
| Mounting noexec /run/user/1000/dconf | |
| 1229 1224 0:61 /dconf /run/user/1000/dconf rw,nosuid,nodev,noexec,relatime master:484 - tmpfs tmpfs rw,size=3152292k,nr_inodes=788073,mode=700,uid=1000,gid=1000,inode64 | |
| mountid=1229 fsname=/dconf dir=/run/user/1000/dconf fstype=tmpfs | |
| Mounting noexec /run/user/1000/ICEauthority | |
| 1230 1225 0:61 /ICEauthority /run/user/1000/ICEauthority rw,nosuid,nodev,noexec,relatime master:484 - tmpfs tmpfs rw,size=3152292k,nr_inodes=788073,mode=700,uid=1000,gid=1000,inode64 | |
| mountid=1230 fsname=/ICEauthority dir=/run/user/1000/ICEauthority fstype=tmpfs | |
| Mounting noexec /run/user/1000/pulse/native | |
| 1231 1226 0:61 /pulse/native /run/user/1000/pulse/native rw,nosuid,nodev,noexec,relatime master:484 - tmpfs tmpfs rw,size=3152292k,nr_inodes=788073,mode=700,uid=1000,gid=1000,inode64 | |
| mountid=1231 fsname=/pulse/native dir=/run/user/1000/pulse/native fstype=tmpfs | |
| Mounting noexec /run/user/1000/pipewire-0 | |
| 1232 1227 0:61 /pipewire-0 /run/user/1000/pipewire-0 rw,nosuid,nodev,noexec,relatime master:484 - tmpfs tmpfs rw,size=3152292k,nr_inodes=788073,mode=700,uid=1000,gid=1000,inode64 | |
| mountid=1232 fsname=/pipewire-0 dir=/run/user/1000/pipewire-0 fstype=tmpfs | |
| Mounting noexec /dev/shm | |
| 1233 1104 0:82 /shm /dev/shm rw,nosuid,nodev,noexec - tmpfs tmpfs rw,mode=755,inode64 | |
| mountid=1233 fsname=/shm dir=/dev/shm fstype=tmpfs | |
| Mounting noexec /tmp | |
| 1235 1234 0:39 /.X11-unix /tmp/.X11-unix rw,nosuid,nodev master:44 - tmpfs tmpfs rw,nr_inodes=1048576,inode64 | |
| mountid=1235 fsname=/.X11-unix dir=/tmp/.X11-unix fstype=tmpfs | |
| Mounting noexec /tmp/.X11-unix | |
| 1236 1235 0:39 /.X11-unix /tmp/.X11-unix rw,nosuid,nodev,noexec master:44 - tmpfs tmpfs rw,nr_inodes=1048576,inode64 | |
| mountid=1236 fsname=/.X11-unix dir=/tmp/.X11-unix fstype=tmpfs | |
| Warning (blacklisting): cannot open /usr/local/sbin/gjs: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/gjs-console: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/lua*: Permission denied | |
| Warning (blacklisting): cannot open /usr/include/lua*: Permission denied | |
| Disable /usr/lib/liblua5.2.so.5.2.4 (requested /usr/lib/liblua.so.5.2) | |
| Disable /usr/lib/liblua5.2.so.5.2.4 (requested /usr/lib/liblua.so.5.2.4) | |
| Disable /usr/lib/liblua5.2.so.5.2.4 (requested /usr/lib/liblua5.2.so) | |
| Disable /usr/lib/liblua5.2.so.5.2.4 (requested /usr/lib/liblua5.2.so.5.2) | |
| Disable /usr/lib/liblua5.2.so.5.2.4 | |
| Disable /usr/lib/libluajit-5.1.so.2.1.1702233742 (requested /usr/lib/libluajit-5.1.so) | |
| Disable /usr/lib/libluajit-5.1.so.2.1.1702233742 (requested /usr/lib/libluajit-5.1.so.2) | |
| Disable /usr/lib/libluajit-5.1.so.2.1.1702233742 | |
| Disable /usr/lib/liblua++.so.5.4.6 (requested /usr/lib/liblua++.so) | |
| Disable /usr/lib/liblua++.so.5.4.6 (requested /usr/lib/liblua++.so.5.4) | |
| Disable /usr/lib/liblua++.so.5.4.6 | |
| Disable /usr/lib/liblua++.so.5.4.6 (requested /usr/lib/liblua++5.4.so) | |
| Disable /usr/lib/liblua.so.5.4.6 (requested /usr/lib/liblua.so) | |
| Disable /usr/lib/liblua.so.5.4.6 (requested /usr/lib/liblua.so.5.4) | |
| Disable /usr/lib/liblua.so.5.4.6 | |
| Disable /usr/lib/liblua.so.5.4.6 (requested /usr/lib/liblua5.4.so) | |
| Disable /usr/lib/lua | |
| Disable /usr/lib/liblua5.2.so.5.2.4 (requested /usr/lib64/liblua.so.5.2) | |
| Disable /usr/lib/liblua5.2.so.5.2.4 (requested /usr/lib64/liblua.so.5.2.4) | |
| Disable /usr/lib/liblua5.2.so.5.2.4 (requested /usr/lib64/liblua5.2.so) | |
| Disable /usr/lib/liblua5.2.so.5.2.4 (requested /usr/lib64/liblua5.2.so.5.2) | |
| Disable /usr/lib/liblua5.2.so.5.2.4 (requested /usr/lib64/liblua5.2.so.5.2.4) | |
| Disable /usr/lib/libluajit-5.1.so.2.1.1702233742 (requested /usr/lib64/libluajit-5.1.so) | |
| Disable /usr/lib/libluajit-5.1.so.2.1.1702233742 (requested /usr/lib64/libluajit-5.1.so.2) | |
| Disable /usr/lib/libluajit-5.1.so.2.1.1702233742 (requested /usr/lib64/libluajit-5.1.so.2.1.1702233742) | |
| Disable /usr/lib/liblua++.so.5.4.6 (requested /usr/lib64/liblua++.so) | |
| Disable /usr/lib/liblua++.so.5.4.6 (requested /usr/lib64/liblua++.so.5.4) | |
| Disable /usr/lib/liblua++.so.5.4.6 (requested /usr/lib64/liblua++.so.5.4.6) | |
| Disable /usr/lib/liblua++.so.5.4.6 (requested /usr/lib64/liblua++5.4.so) | |
| Disable /usr/lib/liblua.so.5.4.6 (requested /usr/lib64/liblua.so) | |
| Disable /usr/lib/liblua.so.5.4.6 (requested /usr/lib64/liblua.so.5.4) | |
| Disable /usr/lib/liblua.so.5.4.6 (requested /usr/lib64/liblua.so.5.4.6) | |
| Disable /usr/lib/liblua.so.5.4.6 (requested /usr/lib64/liblua5.4.so) | |
| Disable /usr/lib/lua (requested /usr/lib64/lua) | |
| Warning (blacklisting): cannot open /usr/local/sbin/node: Permission denied | |
| Warning (blacklisting): cannot open /usr/include/node: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/core_perl: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/cpan*: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/perl: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/site_perl: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/vendor_perl: Permission denied | |
| Disable /usr/lib/perl5 | |
| Disable /usr/lib/perl5 (requested /usr/lib64/perl5) | |
| Disable /usr/share/perl5 | |
| Warning (blacklisting): cannot open /usr/local/sbin/rxvt: Permission denied | |
| Warning (blacklisting): cannot open /usr/local/sbin/php*: Permission denied | |
| Disable /usr/lib/php | |
| Warning (blacklisting): cannot open /usr/local/sbin/ruby: Permission denied | |
| Disable /usr/lib/ruby | |
| Disable /usr/lib/ruby (requested /usr/lib64/ruby) | |
| Not blacklist /home/marek/.rubies/ruby-master/bin/python2* | |
| Not blacklist /home/marek/perl5/bin/python2* | |
| Not blacklist /home/marek/gcc-arm-none-eabi-10.3-2021.10/bin/python2* | |
| Not blacklist /home/marek/.pyenv/shims/python2* | |
| Not blacklist /home/marek/.rvm/gems/ruby-3.2.2/bin/python2* | |
| Not blacklist /home/marek/.rvm/gems/ruby-3.2.2@global/bin/python2* | |
| Not blacklist /home/marek/.rvm/rubies/ruby-3.2.2/bin/python2* | |
| Not blacklist /home/marek/.nvm/versions/node/v20.10.0/bin/python2* | |
| Not blacklist /home/marek/.pyenv/bin/python2* | |
| Not blacklist /usr/local/bin/python2* | |
| Not blacklist /usr/bin/python2* | |
| Not blacklist /bin/python2* | |
| Not blacklist /usr/local/sbin/python2* | |
| Not blacklist /var/lib/flatpak/exports/bin/python2* | |
| Not blacklist /usr/lib/jvm/default/bin/python2* | |
| Not blacklist /usr/bin/site_perl/python2* | |
| Not blacklist /usr/bin/vendor_perl/python2* | |
| Not blacklist /usr/bin/core_perl/python2* | |
| Not blacklist /usr/lib/rustup/bin/python2* | |
| Not blacklist /home/marek/.rvm/bin/python2* | |
| Not blacklist /home/marek/.local/bin/python2* | |
| Not blacklist /home/marek/go/bin/python2* | |
| Not blacklist /home/marek/.cargo/bin/python2* | |
| Not blacklist /usr/include/python2* | |
| Not blacklist /usr/lib/python2* | |
| Not blacklist /usr/local/lib/python2* | |
| Not blacklist /usr/share/python2* | |
| Not blacklist /home/marek/.rubies/ruby-master/bin/python3* | |
| Not blacklist /home/marek/perl5/bin/python3* | |
| Not blacklist /home/marek/gcc-arm-none-eabi-10.3-2021.10/bin/python3* | |
| Not blacklist /home/marek/.pyenv/shims/python3* | |
| Not blacklist /home/marek/.rvm/gems/ruby-3.2.2/bin/python3* | |
| Not blacklist /home/marek/.rvm/gems/ruby-3.2.2@global/bin/python3* | |
| Not blacklist /home/marek/.rvm/rubies/ruby-3.2.2/bin/python3* | |
| Not blacklist /home/marek/.nvm/versions/node/v20.10.0/bin/python3* | |
| Not blacklist /home/marek/.pyenv/bin/python3* | |
| Not blacklist /usr/local/bin/python3.11 | |
| Not blacklist /usr/local/bin/python3.11-config | |
| Not blacklist /usr/local/bin/python3 | |
| Not blacklist /usr/local/bin/python3-config | |
| Not blacklist /usr/bin/python3.11 | |
| Not blacklist /usr/bin/python3.11-config | |
| Not blacklist /usr/bin/python3 | |
| Not blacklist /usr/bin/python3-config | |
| Not blacklist /bin/python3.11 | |
| Not blacklist /bin/python3.11-config | |
| Not blacklist /bin/python3 | |
| Not blacklist /bin/python3-config | |
| Not blacklist /usr/local/sbin/python3* | |
| Not blacklist /var/lib/flatpak/exports/bin/python3* | |
| Not blacklist /usr/lib/jvm/default/bin/python3* | |
| Not blacklist /usr/bin/site_perl/python3* | |
| Not blacklist /usr/bin/vendor_perl/python3* | |
| Not blacklist /usr/bin/core_perl/python3* | |
| Not blacklist /usr/lib/rustup/bin/python3* | |
| Not blacklist /home/marek/.rvm/bin/python3* | |
| Not blacklist /home/marek/.local/bin/python3* | |
| Not blacklist /home/marek/go/bin/python3* | |
| Not blacklist /home/marek/.cargo/bin/python3* | |
| Not blacklist /usr/include/python3* | |
| Not blacklist /usr/lib/python3.11 | |
| Not blacklist /usr/lib/python3.12 | |
| Not blacklist /usr/lib64/python3.11 | |
| Not blacklist /usr/lib64/python3.12 | |
| Not blacklist /usr/local/lib/python3* | |
| Not blacklist /usr/share/python3* | |
| Not blacklist /home/marek/.config/torbrowser | |
| Not blacklist /home/marek/.local/share/torbrowser | |
| Mounting read-only /tmp/.X11-unix | |
| 1278 1236 0:39 /.X11-unix /tmp/.X11-unix ro,nosuid,nodev,noexec master:44 - tmpfs tmpfs rw,nr_inodes=1048576,inode64 | |
| mountid=1278 fsname=/.X11-unix dir=/tmp/.X11-unix fstype=tmpfs | |
| Disable /sys/fs | |
| Disable /sys/module | |
| Disable /mnt | |
| Disable /run/mount | |
| Disable /run/media | |
| Drop privileges: pid 96, uid 1000, gid 1000, force_nogroups 0 | |
| nogroups command not ignored | |
| No supplementary groups | |
| Creating empty /home/marek/.config/pulse directory | |
| Mounting noexec /run/firejail/mnt/pulse | |
| 1284 1069 0:74 /pulse /run/firejail/mnt/pulse rw,nosuid,nodev,noexec - tmpfs tmpfs rw,mode=755,inode64 | |
| mountid=1284 fsname=/pulse dir=/run/firejail/mnt/pulse fstype=tmpfs | |
| Mounting /run/firejail/mnt/pulse on /home/marek/.config/pulse | |
| 1285 1141 0:74 /pulse /home/marek/.config/pulse rw,nosuid,nodev,noexec - tmpfs tmpfs rw,mode=755,inode64 | |
| mountid=1285 fsname=/pulse dir=/home/marek/.config/pulse fstype=tmpfs | |
| Current directory: /home/marek | |
| DISPLAY=:0.0 parsed as 0 | |
| Install protocol filter: unix,inet,inet6 | |
| configuring 23 seccomp entries in /run/firejail/mnt/seccomp/seccomp.protocol | |
| sbox run: /run/firejail/lib/fsec-print /run/firejail/mnt/seccomp/seccomp.protocol | |
| Dropping all capabilities | |
| Drop privileges: pid 97, uid 1000, gid 1000, force_nogroups 1 | |
| No supplementary groups | |
| line OP JT JF K | |
| ================================= | |
| 0000: 20 00 00 00000004 ld data.architecture | |
| 0001: 15 04 00 c000003e jeq ARCH_64 0006 (false 0002) | |
| 0002: 20 00 00 00000000 ld data.syscall-number | |
| 0003: 15 01 00 00000167 jeq unknown 0005 (false 0004) | |
| 0004: 06 00 00 7fff0000 ret ALLOW | |
| 0005: 05 00 00 00000009 jmp 000f | |
| 0006: 20 00 00 00000004 ld data.architecture | |
| 0007: 15 01 00 c000003e jeq ARCH_64 0009 (false 0008) | |
| 0008: 06 00 00 7fff0000 ret ALLOW | |
| 0009: 20 00 00 00000000 ld data.syscall-number | |
| 000a: 35 01 00 40000000 jge X32_ABI 000c (false 000b) | |
| 000b: 35 01 00 00000000 jge read 000d (false 000c) | |
| 000c: 06 00 00 00050001 ret ERRNO(1) | |
| 000d: 15 01 00 00000029 jeq socket 000f (false 000e) | |
| 000e: 06 00 00 7fff0000 ret ALLOW | |
| 000f: 20 00 00 00000010 ld data.args[0] | |
| 0010: 15 00 01 00000001 jeq 1 0011 (false 0012) | |
| 0011: 06 00 00 7fff0000 ret ALLOW | |
| 0012: 15 00 01 00000002 jeq 2 0013 (false 0014) | |
| 0013: 06 00 00 7fff0000 ret ALLOW | |
| 0014: 15 00 01 0000000a jeq a 0015 (false 0016) | |
| 0015: 06 00 00 7fff0000 ret ALLOW | |
| 0016: 06 00 00 0005005f ret ERRNO(95) | |
| configuring 54 seccomp entries in /run/firejail/mnt/seccomp/seccomp.32 | |
| sbox run: /run/firejail/lib/fsec-print /run/firejail/mnt/seccomp/seccomp.32 | |
| Dropping all capabilities | |
| Drop privileges: pid 98, uid 1000, gid 1000, force_nogroups 1 | |
| No supplementary groups | |
| line OP JT JF K | |
| ================================= | |
| 0000: 20 00 00 00000004 ld data.architecture | |
| 0001: 15 01 00 40000003 jeq ARCH_32 0003 (false 0002) | |
| 0002: 06 00 00 7fff0000 ret ALLOW | |
| 0003: 20 00 00 00000000 ld data.syscall-number | |
| 0004: 15 30 00 00000015 jeq 15 0035 (false 0005) | |
| 0005: 15 2f 00 00000034 jeq 34 0035 (false 0006) | |
| 0006: 15 2e 00 0000001a jeq 1a 0035 (false 0007) | |
| 0007: 15 2d 00 0000011b jeq 11b 0035 (false 0008) | |
| 0008: 15 2c 00 00000155 jeq 155 0035 (false 0009) | |
| 0009: 15 2b 00 00000156 jeq 156 0035 (false 000a) | |
| 000a: 15 2a 00 0000007f jeq 7f 0035 (false 000b) | |
| 000b: 15 29 00 00000080 jeq 80 0035 (false 000c) | |
| 000c: 15 28 00 0000015e jeq 15e 0035 (false 000d) | |
| 000d: 15 27 00 00000081 jeq 81 0035 (false 000e) | |
| 000e: 15 26 00 0000006e jeq 6e 0035 (false 000f) | |
| 000f: 15 25 00 00000065 jeq 65 0035 (false 0010) | |
| 0010: 15 24 00 00000121 jeq 121 0035 (false 0011) | |
| 0011: 15 23 00 00000057 jeq 57 0035 (false 0012) | |
| 0012: 15 22 00 00000073 jeq 73 0035 (false 0013) | |
| 0013: 15 21 00 00000067 jeq 67 0035 (false 0014) | |
| 0014: 15 20 00 0000015b jeq 15b 0035 (false 0015) | |
| 0015: 15 1f 00 0000015c jeq 15c 0035 (false 0016) | |
| 0016: 15 1e 00 00000087 jeq 87 0035 (false 0017) | |
| 0017: 15 1d 00 00000095 jeq 95 0035 (false 0018) | |
| 0018: 15 1c 00 0000007c jeq 7c 0035 (false 0019) | |
| 0019: 15 1b 00 00000157 jeq 157 0035 (false 001a) | |
| 001a: 15 1a 00 000000fd jeq fd 0035 (false 001b) | |
| 001b: 15 19 00 00000150 jeq 150 0035 (false 001c) | |
| 001c: 15 18 00 00000152 jeq 152 0035 (false 001d) | |
| 001d: 15 17 00 0000015d jeq 15d 0035 (false 001e) | |
| 001e: 15 16 00 0000011e jeq 11e 0035 (false 001f) | |
| 001f: 15 15 00 0000011f jeq 11f 0035 (false 0020) | |
| 0020: 15 14 00 00000120 jeq 120 0035 (false 0021) | |
| 0021: 15 13 00 00000056 jeq 56 0035 (false 0022) | |
| 0022: 15 12 00 00000033 jeq 33 0035 (false 0023) | |
| 0023: 15 11 00 0000007b jeq 7b 0035 (false 0024) | |
| 0024: 15 10 00 000000d9 jeq d9 0035 (false 0025) | |
| 0025: 15 0f 00 000000f5 jeq f5 0035 (false 0026) | |
| 0026: 15 0e 00 000000f6 jeq f6 0035 (false 0027) | |
| 0027: 15 0d 00 000000f7 jeq f7 0035 (false 0028) | |
| 0028: 15 0c 00 000000f8 jeq f8 0035 (false 0029) | |
| 0029: 15 0b 00 000000f9 jeq f9 0035 (false 002a) | |
| 002a: 15 0a 00 00000101 jeq 101 0035 (false 002b) | |
| 002b: 15 09 00 00000112 jeq 112 0035 (false 002c) | |
| 002c: 15 08 00 00000114 jeq 114 0035 (false 002d) | |
| 002d: 15 07 00 00000126 jeq 126 0035 (false 002e) | |
| 002e: 15 06 00 0000013d jeq 13d 0035 (false 002f) | |
| 002f: 15 05 00 0000013c jeq 13c 0035 (false 0030) | |
| 0030: 15 04 00 0000003d jeq 3d 0035 (false 0031) | |
| 0031: 15 03 00 00000058 jeq 58 0035 (false 0032) | |
| 0032: 15 02 00 000000a9 jeq a9 0035 (false 0033) | |
| 0033: 15 01 00 00000082 jeq 82 0035 (false 0034) | |
| 0034: 06 00 00 7fff0000 ret ALLOW | |
| 0035: 06 00 00 00050001 ret ERRNO(1) | |
| Dual 32/64 bit seccomp filter configured | |
| Build default+drop seccomp filter | |
| sbox run: /run/firejail/lib/fseccomp default drop /run/firejail/mnt/seccomp/seccomp /run/firejail/mnt/seccomp/seccomp.postexec !chroot | |
| Dropping all capabilities | |
| Drop privileges: pid 99, uid 1000, gid 1000, force_nogroups 1 | |
| No supplementary groups | |
| Seccomp list in: !chroot, check list: @default-keep, prelist: unknown, | |
| sbox run: /run/firejail/lib/fsec-optimize /run/firejail/mnt/seccomp/seccomp | |
| Dropping all capabilities | |
| Drop privileges: pid 100, uid 1000, gid 1000, force_nogroups 1 | |
| No supplementary groups | |
| configuring 82 seccomp entries in /run/firejail/mnt/seccomp/seccomp | |
| sbox run: /run/firejail/lib/fsec-print /run/firejail/mnt/seccomp/seccomp | |
| Dropping all capabilities | |
| Drop privileges: pid 101, uid 1000, gid 1000, force_nogroups 1 | |
| No supplementary groups | |
| line OP JT JF K | |
| ================================= | |
| 0000: 20 00 00 00000004 ld data.architecture | |
| 0001: 15 01 00 c000003e jeq ARCH_64 0003 (false 0002) | |
| 0002: 06 00 00 7fff0000 ret ALLOW | |
| 0003: 20 00 00 00000000 ld data.syscall-number | |
| 0004: 35 01 00 40000000 jge X32_ABI 0006 (false 0005) | |
| 0005: 35 01 00 00000000 jge read 0007 (false 0006) | |
| 0006: 06 00 00 00050001 ret ERRNO(1) | |
| 0007: 15 00 01 000000a1 jeq chroot 0008 (false 0009) | |
| 0008: 06 00 00 7fff0000 ret ALLOW | |
| 0009: 15 47 00 0000009f jeq adjtimex 0051 (false 000a) | |
| 000a: 15 46 00 00000131 jeq clock_adjtime 0051 (false 000b) | |
| 000b: 15 45 00 000000e3 jeq clock_settime 0051 (false 000c) | |
| 000c: 15 44 00 000000a4 jeq settimeofday 0051 (false 000d) | |
| 000d: 15 43 00 0000009a jeq modify_ldt 0051 (false 000e) | |
| 000e: 15 42 00 000000d4 jeq lookup_dcookie 0051 (false 000f) | |
| 000f: 15 41 00 0000012a jeq perf_event_open 0051 (false 0010) | |
| 0010: 15 40 00 000001b6 jeq pidfd_getfd 0051 (false 0011) | |
| 0011: 15 3f 00 00000137 jeq process_vm_writev 0051 (false 0012) | |
| 0012: 15 3e 00 000000b0 jeq delete_module 0051 (false 0013) | |
| 0013: 15 3d 00 00000139 jeq finit_module 0051 (false 0014) | |
| 0014: 15 3c 00 000000af jeq init_module 0051 (false 0015) | |
| 0015: 15 3b 00 000000a1 jeq chroot 0051 (false 0016) | |
| 0016: 15 3a 00 000001af jeq fsconfig 0051 (false 0017) | |
| 0017: 15 39 00 000001b0 jeq fsmount 0051 (false 0018) | |
| 0018: 15 38 00 000001ae jeq fsopen 0051 (false 0019) | |
| 0019: 15 37 00 000001b1 jeq fspick 0051 (false 001a) | |
| 001a: 15 36 00 000000a5 jeq mount 0051 (false 001b) | |
| 001b: 15 35 00 000001ad jeq move_mount 0051 (false 001c) | |
| 001c: 15 34 00 000001ac jeq open_tree 0051 (false 001d) | |
| 001d: 15 33 00 0000009b jeq pivot_root 0051 (false 001e) | |
| 001e: 15 32 00 000000a6 jeq umount2 0051 (false 001f) | |
| 001f: 15 31 00 0000009c jeq _sysctl 0051 (false 0020) | |
| 0020: 15 30 00 000000b7 jeq afs_syscall 0051 (false 0021) | |
| 0021: 15 2f 00 000000ae jeq create_module 0051 (false 0022) | |
| 0022: 15 2e 00 000000b1 jeq get_kernel_syms 0051 (false 0023) | |
| 0023: 15 2d 00 000000b5 jeq getpmsg 0051 (false 0024) | |
| 0024: 15 2c 00 000000b6 jeq putpmsg 0051 (false 0025) | |
| 0025: 15 2b 00 000000b2 jeq query_module 0051 (false 0026) | |
| 0026: 15 2a 00 000000b9 jeq security 0051 (false 0027) | |
| 0027: 15 29 00 0000008b jeq sysfs 0051 (false 0028) | |
| 0028: 15 28 00 000000b8 jeq tuxcall 0051 (false 0029) | |
| 0029: 15 27 00 00000086 jeq uselib 0051 (false 002a) | |
| 002a: 15 26 00 00000088 jeq ustat 0051 (false 002b) | |
| 002b: 15 25 00 000000ec jeq vserver 0051 (false 002c) | |
| 002c: 15 24 00 000000ad jeq ioperm 0051 (false 002d) | |
| 002d: 15 23 00 000000ac jeq iopl 0051 (false 002e) | |
| 002e: 15 22 00 000000f6 jeq kexec_load 0051 (false 002f) | |
| 002f: 15 21 00 00000140 jeq kexec_file_load 0051 (false 0030) | |
| 0030: 15 20 00 000000a9 jeq reboot 0051 (false 0031) | |
| 0031: 15 1f 00 000000a7 jeq swapon 0051 (false 0032) | |
| 0032: 15 1e 00 000000a8 jeq swapoff 0051 (false 0033) | |
| 0033: 15 1d 00 00000130 jeq open_by_handle_at 0051 (false 0034) | |
| 0034: 15 1c 00 0000012f jeq name_to_handle_at 0051 (false 0035) | |
| 0035: 15 1b 00 000000fb jeq ioprio_set 0051 (false 0036) | |
| 0036: 15 1a 00 00000067 jeq syslog 0051 (false 0037) | |
| 0037: 15 19 00 0000012c jeq fanotify_init 0051 (false 0038) | |
| 0038: 15 18 00 000000f8 jeq add_key 0051 (false 0039) | |
| 0039: 15 17 00 000000f9 jeq request_key 0051 (false 003a) | |
| 003a: 15 16 00 000000ed jeq mbind 0051 (false 003b) | |
| 003b: 15 15 00 00000100 jeq migrate_pages 0051 (false 003c) | |
| 003c: 15 14 00 00000117 jeq move_pages 0051 (false 003d) | |
| 003d: 15 13 00 000000fa jeq keyctl 0051 (false 003e) | |
| 003e: 15 12 00 000000ce jeq io_setup 0051 (false 003f) | |
| 003f: 15 11 00 000000cf jeq io_destroy 0051 (false 0040) | |
| 0040: 15 10 00 000000d0 jeq io_getevents 0051 (false 0041) | |
| 0041: 15 0f 00 000000d1 jeq io_submit 0051 (false 0042) | |
| 0042: 15 0e 00 000000d2 jeq io_cancel 0051 (false 0043) | |
| 0043: 15 0d 00 000000d8 jeq remap_file_pages 0051 (false 0044) | |
| 0044: 15 0c 00 000000ee jeq set_mempolicy 0051 (false 0045) | |
| 0045: 15 0b 00 00000116 jeq vmsplice 0051 (false 0046) | |
| 0046: 15 0a 00 00000143 jeq userfaultfd 0051 (false 0047) | |
| 0047: 15 09 00 000000a3 jeq acct 0051 (false 0048) | |
| 0048: 15 08 00 00000141 jeq bpf 0051 (false 0049) | |
| 0049: 15 07 00 000000b4 jeq nfsservctl 0051 (false 004a) | |
| 004a: 15 06 00 000000ab jeq setdomainname 0051 (false 004b) | |
| 004b: 15 05 00 000000aa jeq sethostname 0051 (false 004c) | |
| 004c: 15 04 00 00000099 jeq vhangup 0051 (false 004d) | |
| 004d: 15 03 00 00000065 jeq ptrace 0051 (false 004e) | |
| 004e: 15 02 00 00000087 jeq personality 0051 (false 004f) | |
| 004f: 15 01 00 00000136 jeq process_vm_readv 0051 (false 0050) | |
| 0050: 06 00 00 7fff0000 ret ALLOW | |
| 0051: 06 00 01 00050001 ret ERRNO(1) | |
| seccomp filter configured | |
| Mounting read-only /run/firejail/mnt/seccomp | |
| 1287 1069 0:74 /seccomp /run/firejail/mnt/seccomp ro,nosuid - tmpfs tmpfs rw,mode=755,inode64 | |
| mountid=1287 fsname=/seccomp dir=/run/firejail/mnt/seccomp fstype=tmpfs | |
| Seccomp directory: | |
| ls /run/firejail/mnt/seccomp | |
| drwxr-xr-x root root 160 . | |
| drwxr-xr-x root root 320 .. | |
| -rw-r--r-- 1000 1000 656 seccomp | |
| -rw-r--r-- 1000 1000 432 seccomp.32 | |
| -rw-r--r-- 1000 1000 114 seccomp.list | |
| -rw-r--r-- 1000 1000 0 seccomp.postexec | |
| -rw-r--r-- 1000 1000 0 seccomp.postexec32 | |
| -rw-r--r-- 1000 1000 184 seccomp.protocol | |
| Active seccomp files: | |
| cat /run/firejail/mnt/seccomp/seccomp.list | |
| /run/firejail/mnt/seccomp/seccomp.protocol | |
| /run/firejail/mnt/seccomp/seccomp.32 | |
| /run/firejail/mnt/seccomp/seccomp | |
| Dropping all capabilities | |
| nogroups command not ignored | |
| noroot user namespace installed | |
| Dropping all capabilities | |
| NO_NEW_PRIVS set | |
| Drop privileges: pid 1, uid 1000, gid 1000, force_nogroups 0 | |
| nogroups command not ignored | |
| No supplementary groups | |
| Closing non-standard file descriptors | |
| ]0;firejail /usr/bin/torbrowser-launcher Starting application | |
| LD_PRELOAD=(null) | |
| execvp argument 0: /usr/bin/torbrowser-launcher | |
| Child process initialized in 226.42 ms | |
| Installing /run/firejail/mnt/seccomp/seccomp seccomp filter | |
| Installing /run/firejail/mnt/seccomp/seccomp.32 seccomp filter | |
| Installing /run/firejail/mnt/seccomp/seccomp.protocol seccomp filter | |
| monitoring pid 102 | |
| Tor Browser Launcher | |
| By Micah Lee & Tor Project, licensed under MIT | |
| version 0.3.7 | |
| https://gitlab.torproject.org/tpo/applications/torbrowser-launcher/ | |
| (python:102): dbind-[1;33mWARNING[0m **: [34m16:52:15.724[0m: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/1000/at-spi/bus_0: No such file or directory | |
| Launching Tor Browser. | |
| Running /home/marek/.local/share/torbrowser/tbb/x86_64/tor-browser/start-tor-browser.desktop | |
| Launching './Browser/start-tor-browser --detach'... | |
| Sandbox monitor: waitpid 102 retval 102 status 0 | |
| Sandbox monitor: monitoring 133 | |
| monitoring pid 133 | |
| Sandbox monitor: waitpid 133 retval 133 status 0 | |
| Sandbox monitor: monitoring 438 | |
| monitoring pid 438 | |
| Sandbox monitor: waitpid 438 retval 438 status 0 | |
| Parent is shutting down, bye... | |
| ]0;marek@ciel:~[?2004h[0;31m┌─[[0;39mmarek[01;33m@[01;96mciel[0;31m]─[[0;32m~[0;31m] | |
| [0;31m└──╼ [0m[01;33m$[0m[?2004l | |
| exit | |
| Script done on 2024-03-09 16:52:32+00:00 [COMMAND_EXIT_CODE="0"] |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment