Unable to run firejail and proxychains at the same time

[bussw83]

Hello, I am new with Linux and have been using proxychains with firefox for some time.
I decided to install firejail but when I try to run firefox with proxychains, it seems that firejail blocks it. The browser is opened but proxychains don’t seem to run properly.

I am using Parrot which I think uses Debian.

This is the output when I start proxychains with firefox:

$ proxychains firefox
ProxyChains-3.1 (http://proxychains.sf.net)
Reading profile /etc/firejail/firefox.profile
Reading profile /etc/firejail/whitelist-usr-share-common.inc
Reading profile /etc/firejail/firefox-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-proc.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-run-common.inc
Reading profile /etc/firejail/whitelist-runuser-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Parent pid 8263, child pid 8266
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Warning: cleaning all supplementary groups
Child process initialized in 200.60 ms
Warning: an existing sandbox was detected. /usr/bin/firefox-esr will run without any additional sandboxing features

###!!! [Parent][RunMessage] Error: Channel closing: too late to send/recv, messages will be lost

Parent is shutting down, bye…

I am sorry if this is a question that is too basic, I moved to linux a few weeks ago.

Thank you in advance :)

[rusty-snake]

#1093 #2699 #1160 #4156

TL;DR: Either run firejail proxichains /usr/bin/firefox with a firefox.local that allows proxychains or add env LD_PRELOAD=<path to libproxychains.so> to you firefox.local.

[rusty-snake]

Please use code-blocks and details-summary tags for readability.

firejail proxychains /usr/bin/firefox
Reading profile /etc/firejail/default.profile

Ooops, it should be firejail --profile=firefox proxychains /usr/bin/firefox

or firejail --profile=firefox env LD_PRELOAD=<path to lib> /usr/bin/firefox.

run_symlink: LD_PRELOAD

The LD_PRELOAD issue.

whitelist /usr/share/doc/libproxychains3
whitelist /usr/share/doc/libproxychains
whitelist /usr/share/doc/proxychains

1. This is documentation
2. This is already whitelisted

/home/sugarbae/libproxychains.so.3

How and where did you installed proxychains?

firejail --profile=/etc/firejail/firefox.profile proxychains firefox

This does not work. You must call firefox by path.

firejail --profile=start-tor-browser --private-bin=proxychains --private-etc=proxychains.conf proxychains

😮

[bussw83]

Hello my bad I will make sure I use the brackets from now on :)

Yes I tried all I saw here, probably was not the best idea lol :')

I installed proxychains from a tutorial online, I have removed today and installed proxychains4

now I am getting this:

`firejail --profile=firefox env LD_PRELOAD=</usr/lib/x86_64-linux-gnu/libproxychains.so.4> /usr/bin/firefox
Reading profile /etc/firejail/firefox.profile
Reading profile /etc/firejail/firefox.local
Reading profile /etc/firejail/whitelist-usr-share-common.inc
Reading profile /etc/firejail/firefox-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-proc.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-run-common.inc
Reading profile /etc/firejail/whitelist-runuser-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Warning: noroot option is not available
Reading profile /etc/firejail/whitelist-usr-share-common.inc
Reading profile /etc/firejail/firefox-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-proc.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-run-common.inc
Reading profile /etc/firejail/whitelist-runuser-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Warning: noroot option is not available
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Parent pid 7255, child pid 7258
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Child process initialized in 377.47 ms

Parent is shutting down, bye...`

What do you think? Seems that the preload is not longer an issue but still not running proxychains, thanks again for all your help :(

[rusty-snake]

firejail --profile=firefox env LD_PRELOAD=<path to lib> /usr/bin/firefox the strong part is the place holder.

[bussw83]

Hi, do you mean that the path to the lib I used was wrong?

[rusty-snake]

Yes. If it is at /usr/lib/x86_64-linux-gnu/libproxychains.so.4, the command is firejail --profile=firefox env LD_PRELOAD=/usr/lib/x86_64-linux-gnu/libproxychains.so.4 /usr/bin/firefox.

[osevan]

#5243 (reply in thread)

When i run this proxychains works but apparmor lib doesnt invoked.

:-(

[osevan]

Maybe i found a bug?