Hi Phil,

On Wed, May 05, 2021 at 03:41:43PM +0200, phil.night...@gmail.com wrote:
> Disable /var/cache/home/nightowl/chromium (requested 
> /home/nightowl/.cache/chromium)
> Disable /var/cache/home/nightowl/keepassxc (requested 
> /home/nightowl/.cache/keepassxc)
> Disable /var/cache/home/nightowl/mozilla (requested 
> /home/nightowl/.cache/mozilla)
> Error: tmpfs outside $HOME is only available for root
> Error: proc 7050 cannot sync with peer: unexpected EOF
> Peer 7051 unexpectedly exited with status 1

the problem seems to be related to your specific setup.
Somehow your ~/.cache/ is inside /var/cache (by using symlinks?)?

The skypeforlinux profile includes the electron profile, which has the
line:  private-cache
This asks firejail to create a private cache (~/.cache) directory, which
is implemented by mounting a tmpfs directory over the original .cache
directory.
But as your .cache directory is not actually inside your home directory,
firejail refuses to do that, because non-root users are not allowed to
mount tmpfs directories outside their home.

To keep your cache setup you can try the following:
Create a file /etc/firejail/skypeforlinux.local and add the following
line into it:

ignore private-cache

This will ask firejail while reading the profiles to ignore the
"private-cache" setting. It should then no longer try to mount a
tmpfs over it.
(This will also cause your cache to be no longer private, i.e.
skypeforlinux could read other cached files.)

Kind regards,
  Reiner

Attachment: signature.asc
Description: PGP signature

Reply via email to