Public bug reported: I just updated for Impish Indri beta release but Widevine is always crashing. With I disable the GMP sandbox it works fine. Here is some console logs showing the violations: ``` ➜ firefox --ProfileManager Gtk-Message: 09:58:02.539: Failed to load module "appmenu-gtk-module"
###!!! [Child][RunMessage] Error: Channel closing: too late to send/recv, messages will be lost Gtk-Message: 09:58:10.435: Failed to load module "appmenu-gtk-module" Sandbox: attempt to open unexpected file /usr/lib/firefox/librt.so.1 Sandbox: attempt to open unexpected file /lib/x86_64-linux-gnu/librt.so.1 Sandbox: attempt to open unexpected file /lib/x86_64-linux-gnu/glibc-hwcaps/x86-64-v3/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/x86_64-linux-gnu/glibc-hwcaps/x86-64-v2/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/x86_64-linux-gnu/tls/haswell/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/x86_64-linux-gnu/tls/haswell/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/x86_64-linux-gnu/tls/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/x86_64-linux-gnu/tls/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/x86_64-linux-gnu/haswell/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/x86_64-linux-gnu/haswell/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/x86_64-linux-gnu/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/x86_64-linux-gnu/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/x86_64-linux-gnu/glibc-hwcaps/x86-64-v3/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/x86_64-linux-gnu/glibc-hwcaps/x86-64-v2/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/x86_64-linux-gnu/tls/haswell/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/x86_64-linux-gnu/tls/haswell/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/x86_64-linux-gnu/tls/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/x86_64-linux-gnu/tls/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/x86_64-linux-gnu/haswell/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/x86_64-linux-gnu/haswell/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/x86_64-linux-gnu/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/x86_64-linux-gnu/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/glibc-hwcaps/x86-64-v3/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/glibc-hwcaps/x86-64-v2/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/tls/haswell/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/tls/haswell/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/tls/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/tls/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/haswell/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/haswell/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/glibc-hwcaps/x86-64-v3/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/glibc-hwcaps/x86-64-v2/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/tls/haswell/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/tls/haswell/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/tls/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/tls/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/haswell/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/haswell/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. ###!!! [Parent][MessageChannel::Call] Error: Channel error: cannot send/recv ###!!! [Parent][RunMessage] Error: Channel closing: too late to send/recv, messages will be lost Sandbox: Unexpected EOF, op 0 flags 00 path /proc/cpuinfo ``` I'm using the .deb package version, not the Snap one. ** Affects: firefox (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/1945100 Title: Widevine violates the sandbox and crashes Status in firefox package in Ubuntu: New Bug description: I just updated for Impish Indri beta release but Widevine is always crashing. With I disable the GMP sandbox it works fine. Here is some console logs showing the violations: ``` ➜ firefox --ProfileManager Gtk-Message: 09:58:02.539: Failed to load module "appmenu-gtk-module" ###!!! [Child][RunMessage] Error: Channel closing: too late to send/recv, messages will be lost Gtk-Message: 09:58:10.435: Failed to load module "appmenu-gtk-module" Sandbox: attempt to open unexpected file /usr/lib/firefox/librt.so.1 Sandbox: attempt to open unexpected file /lib/x86_64-linux-gnu/librt.so.1 Sandbox: attempt to open unexpected file /lib/x86_64-linux-gnu/glibc-hwcaps/x86-64-v3/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/x86_64-linux-gnu/glibc-hwcaps/x86-64-v2/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/x86_64-linux-gnu/tls/haswell/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/x86_64-linux-gnu/tls/haswell/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/x86_64-linux-gnu/tls/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/x86_64-linux-gnu/tls/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/x86_64-linux-gnu/haswell/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/x86_64-linux-gnu/haswell/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/x86_64-linux-gnu/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/x86_64-linux-gnu/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/x86_64-linux-gnu/glibc-hwcaps/x86-64-v3/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/x86_64-linux-gnu/glibc-hwcaps/x86-64-v2/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/x86_64-linux-gnu/tls/haswell/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/x86_64-linux-gnu/tls/haswell/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/x86_64-linux-gnu/tls/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/x86_64-linux-gnu/tls/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/x86_64-linux-gnu/haswell/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/x86_64-linux-gnu/haswell/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/x86_64-linux-gnu/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/x86_64-linux-gnu/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/glibc-hwcaps/x86-64-v3/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/glibc-hwcaps/x86-64-v2/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/tls/haswell/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/tls/haswell/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/tls/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/tls/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/haswell/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/haswell/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /lib/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/glibc-hwcaps/x86-64-v3/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/glibc-hwcaps/x86-64-v2/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/tls/haswell/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/tls/haswell/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/tls/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/tls/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/haswell/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/haswell/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/x86_64/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. Sandbox: attempt to open unexpected file /usr/lib/librt.so.1 Sandbox: seccomp sandbox violation: pid 24799, tid 24799, syscall 262, args 4294967196 140721817045120 140721817045312 0 4294967295 140721817045120. ###!!! [Parent][MessageChannel::Call] Error: Channel error: cannot send/recv ###!!! [Parent][RunMessage] Error: Channel closing: too late to send/recv, messages will be lost Sandbox: Unexpected EOF, op 0 flags 00 path /proc/cpuinfo ``` I'm using the .deb package version, not the Snap one. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1945100/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp