Add a profile for WinBox (Microtik WinBox 4)

[junbr0]

if anyone successfully made firejail profile for native winbox 4 controller please share...
because "firejail .WinBox or with --noprofile etc " just dont works 'out of the box'.
thank you.

OS on opensuse 15.6

Warning: QQmlApplicationEngine failed to load component (:0, )
Warning: qrc:/qt/qml/WinBoxQml/qml/MainWindow.qml: File is empty (qrc:/qt/qml/WinBoxQml/qml/MainWindow.qml:4294967295, )

unbr0@OSLeap15:/usr/local/bin/WinBox_Linux> clear;firejail --noprofile --debug ./WinBox

Building quoted command line: './WinBox' 
Command name #WinBox#
DISPLAY=:0.0 parsed as 0
Using the local network stack
Parent pid 20509, child pid 20510
Initializing child process
Host network configured
PID namespace installed
Mounting tmpfs on /run/firejail/mnt directory
Creating empty /run/firejail/mnt/seccomp directory
Creating empty /run/firejail/mnt/seccomp/seccomp.protocol file
Creating empty /run/firejail/mnt/seccomp/seccomp.postexec file
Creating empty /run/firejail/mnt/seccomp/seccomp.postexec32 file
Mounting /proc filesystem representing the PID namespace
Basic read-only filesystem:
Mounting read-only /etc
1494 1462 8:19 /etc /etc ro,relatime master:1 - ext4 /dev/sdb3 rw
mountid=1494 fsname=/etc dir=/etc fstype=ext4
Mounting noexec /etc
1495 1494 8:19 /etc /etc ro,nosuid,nodev,noexec,relatime master:1 - ext4 /dev/sdb3 rw
mountid=1495 fsname=/etc dir=/etc fstype=ext4
Mounting read-only /var
1496 1462 8:19 /var /var ro,relatime master:1 - ext4 /dev/sdb3 rw
mountid=1496 fsname=/var dir=/var fstype=ext4
Mounting noexec /var
1497 1496 8:19 /var /var ro,nosuid,nodev,noexec,relatime master:1 - ext4 /dev/sdb3 rw
mountid=1497 fsname=/var dir=/var fstype=ext4
Mounting read-only /usr
1498 1462 8:19 /usr /usr ro,relatime master:1 - ext4 /dev/sdb3 rw
mountid=1498 fsname=/usr dir=/usr fstype=ext4
Mounting read-only /bin
1499 1462 8:19 /bin /bin ro,relatime master:1 - ext4 /dev/sdb3 rw
mountid=1499 fsname=/bin dir=/bin fstype=ext4
Mounting read-only /sbin
1500 1462 8:19 /sbin /sbin ro,relatime master:1 - ext4 /dev/sdb3 rw
mountid=1500 fsname=/sbin dir=/sbin fstype=ext4
Mounting read-only /lib
1501 1462 8:19 /lib /lib ro,relatime master:1 - ext4 /dev/sdb3 rw
mountid=1501 fsname=/lib dir=/lib fstype=ext4
Mounting read-only /lib64
1502 1462 8:19 /lib64 /lib64 ro,relatime master:1 - ext4 /dev/sdb3 rw
mountid=1502 fsname=/lib64 dir=/lib64 fstype=ext4
Mounting tmpfs on /var/lock
Mounting tmpfs on /var/tmp
Mounting tmpfs on /var/log
Mounting tmpfs on /var/lib/dhcp
Mounting tmpfs on /var/lib/sudo
Create the new utmp file
Mount the new utmp file
Cleaning /home directory
Cleaning /run/user directory
Sanitizing /etc/passwd, UID_MIN 1000
Sanitizing /etc/group, GID_MIN 1000
Disable /run/firejail/sandbox
Disable /run/firejail/network
Disable /run/firejail/bandwidth
Disable /run/firejail/name
Disable /run/firejail/profile
Disable /run/firejail/x11
blacklist /run/firejail/dbus
Mounting read-only /proc/sys
Remounting /sys directory
Disable /sys/firmware
Disable /sys/hypervisor
Disable /sys/power
Disable /sys/kernel/debug
Disable /sys/kernel/vmcoreinfo
Disable /sys/kernel/uevent_helper
Disable /proc/sys/fs/binfmt_misc
Disable /proc/sys/kernel/core_pattern
Disable /proc/sys/kernel/modprobe
Disable /proc/sysrq-trigger
Disable /proc/sys/kernel/hotplug
Disable /proc/sys/vm/panic_on_oom
Disable /proc/irq
Disable /proc/bus
Disable /proc/timer_list
Disable /proc/kcore
Disable /proc/kallsyms
Disable /lib/modules
Disable /boot
Disable /selinux
Disable /dev/port
Disable /run/user/1000/gnupg
Disable /run/user/1000/systemd
Disable /dev/kmsg
Disable /proc/kmsg
Disable /sys/fs
Disable /sys/module
Current directory: /usr/local/bin/WinBox_Linux
DISPLAY=:0.0 parsed as 0
Mounting read-only /run/firejail/mnt/seccomp
1546 1491 0:98 /seccomp /run/firejail/mnt/seccomp ro,nosuid - tmpfs tmpfs rw,mode=755,inode64
mountid=1546 fsname=/seccomp dir=/run/firejail/mnt/seccomp fstype=tmpfs
Seccomp directory:
ls /run/firejail/mnt/seccomp
drwxr-xr-x root     root             120 .
drwxr-xr-x root     root             160 ..
-rw-r--r-- junbr0   users            640 seccomp
-rw-r--r-- junbr0   users            432 seccomp.32
-rw-r--r-- junbr0   users              0 seccomp.postexec
-rw-r--r-- junbr0   users              0 seccomp.postexec32
No active seccomp files
Drop privileges: pid 1, uid 1000, gid 100, force_nogroups 0
Closing non-standard file descriptors
Starting application
LD_PRELOAD=(null)
execvp argument 0: ./WinBox
Child process initialized in 5.62 ms
Authorization required, but no authorization protocol specified
monitoring pid 2

APP,INFO: version: "4.0beta8"
Warning: QQmlApplicationEngine failed to load component (:0, )
Warning: qrc:/qt/qml/WinBoxQml/qml/MainWindow.qml: File is empty (qrc:/qt/qml/WinBoxQml/qml/MainWindow.qml:4294967295, )
APP,UPDATE: version fetched: "4.0beta9"
APP,UPDATE: new version available, fetching changelog
UPDATE,ERR: open error target dir: "Read-only file system"

[rusty-snake]

• Try --profile=noprofile.profile
• Make sure it works w/o firejail

[junbr0]

winbox 4 running well without firejail.
with --profile=noprofile.profile there is no such thing profile. not existed.
with --noprofile not running.

with custom profile without everything also dont work# Custom profile for /usr/local/bin/WinBox_Linux/WinBox

# file system
# include /etc/firejail/disable-common.inc

# network
protocol unix,inet,inet6,netlink,packet

# multimedia
nosound
no3d
nodvd
novideo
notv

# kernel
# apparmor

noblacklist ${HOME}/.cache/MikroTik
whitelist /usr/local/bin/WinBox_Linux
whitelist /usr/local/bin/WinBox_Linux/assets
#whitelist /usr/lib64/qt5/qml
#whitelist /usr/lib64/libxcb-glx.so.0
#whitelist /usr/lib64/libEGL.so.1
#whitelist /usr/lib64/libGL.so.1
#whitelist /usr/lib64/libz.so.1
#whitelist /usr/lib64/libfreetype.so.6
whitelist /usr/lib64/*

generate from firetools not working also...

thanks

[kmk3]

Duplicate of #1139

[kmk3]

Basic debugging information is missing; please follow the bug report template:

• https://github.com/netblue30/firejail/issues/new?template=bug_report.md