Bug 1948331 - repeated "Sandbox: attempt to open unexpected file /proc/self/maps"
Summary: repeated "Sandbox: attempt to open unexpected file /proc/self/maps"
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: firefox
Version: 34
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Gecko Maintainer
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-04-11 23:17 UTC by Mads Kiilerich
Modified: 2021-11-03 21:43 UTC (History)
19 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2021-11-03 21:43:38 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Mads Kiilerich 2021-04-11 23:17:15 UTC
Description of problem:

$ journalctl --follow
Apr 12 01:12:51 fedora firefox-wayland.desktop[100633]: Sandbox: attempt to open unexpected file /proc/self/maps
Apr 12 01:12:52 fedora firefox-wayland.desktop[100633]: Sandbox: attempt to open unexpected file /proc/self/maps
Apr 12 01:12:53 fedora firefox-wayland.desktop[100633]: Sandbox: attempt to open unexpected file /proc/self/maps
Apr 12 01:12:54 fedora firefox-wayland.desktop[100633]: Sandbox: attempt to open unexpected file /proc/self/maps
Apr 12 01:12:55 fedora firefox-wayland.desktop[100633]: Sandbox: attempt to open unexpected file /proc/self/maps
Apr 12 01:12:56 fedora firefox-wayland.desktop[100633]: Sandbox: attempt to open unexpected file /proc/self/maps
Apr 12 01:12:57 fedora firefox-wayland.desktop[100633]: Sandbox: attempt to open unexpected file /proc/self/maps
Apr 12 01:12:58 fedora firefox-wayland.desktop[100633]: Sandbox: attempt to open unexpected file /proc/self/maps
Apr 12 01:12:59 fedora firefox-wayland.desktop[100633]: Sandbox: attempt to open unexpected file /proc/self/maps
Apr 12 01:13:00 fedora firefox-wayland.desktop[100633]: Sandbox: attempt to open unexpected file /proc/self/maps
Apr 12 01:13:01 fedora firefox-wayland.desktop[100633]: Sandbox: attempt to open unexpected file /proc/self/maps

I don't know what triggered this.


Version-Release number of selected component (if applicable):

firefox-87.0-11.fc34.x86_64

Comment 1 Steeve McCauley 2021-04-16 14:30:18 UTC
Same here, but not on wayland.

Apr 16 10:24:52 doont firefox.desktop[123972]: Sandbox: attempt to open unexpected file /proc/self/maps
Apr 16 10:24:52 doont firefox.desktop[123949]: Sandbox: attempt to open unexpected file /proc/self/maps
Apr 16 10:24:53 doont firefox.desktop[123972]: Sandbox: attempt to open unexpected file /proc/self/maps
Apr 16 10:24:53 doont firefox.desktop[123972]: Sandbox: attempt to open unexpected file /proc/self/maps
Apr 16 10:24:53 doont firefox.desktop[123949]: Sandbox: attempt to open unexpected file /proc/self/maps
Apr 16 10:24:54 doont firefox.desktop[123972]: Sandbox: attempt to open unexpected file /proc/self/maps
Apr 16 10:24:54 doont firefox.desktop[123972]: Sandbox: attempt to open unexpected file /proc/self/maps
Apr 16 10:24:54 doont firefox.desktop[123949]: Sandbox: attempt to open unexpected file /proc/self/maps
Apr 16 10:24:55 doont firefox.desktop[123972]: Sandbox: attempt to open unexpected file /proc/self/maps
Apr 16 10:24:55 doont firefox.desktop[123972]: Sandbox: attempt to open unexpected file /proc/self/maps
Apr 16 10:24:55 doont firefox.desktop[123949]: Sandbox: attempt to open unexpected file /proc/self/maps
Apr 16 10:24:56 doont firefox.desktop[123972]: Sandbox: attempt to open unexpected file /proc/self/maps
Apr 16 10:24:56 doont firefox.desktop[123972]: Sandbox: attempt to open unexpected file /proc/self/maps
Apr 16 10:24:56 doont firefox.desktop[123949]: Sandbox: attempt to open unexpected file /proc/self/maps

firefox-87.0-7.fc34.x86_64

/proc/self/maps exists and is readable

$ sestatus 
SELinux status:                 disabled

Comment 2 Victor Cifuentes 2021-05-01 02:54:21 UTC
For me, this issue occurs in both fedora & flathub version over wayland and it's related with DRM content like netflix or prime video.

Comment 3 Steeve McCauley 2021-05-01 10:29:17 UTC
I did a fresh install of F34 yesterday and I'm still seeing it, again on X not wayland.

I do watch both netflix and prime video on this box, but I don't think I've seen it until the machine comes out of suspend.  Stopping firefox ends the journal output, but it continues immediately if restarted.

firefox-88.0-5.fc34.x86_64

Comment 4 Artem Hluvchynskyi 2021-05-10 17:44:50 UTC
Same here after upgrading to Fedora 34, however it's X11 (due to NVIDIA GPU) rather than Wayland here. It appears to happen even without suspend and seems correlated to sudden Gnome Shell restarts. When these messages appear — Gnome randomly restarts, when there are none — it stops doing that. It happens when Netflix is open in Firefox for a while, but there seem to be other causes too, just can't pinpoint yet.

Comment 5 samoht0 2021-05-24 18:39:25 UTC
(In reply to Steeve McCauley from comment #3)
> I did a fresh install of F34 yesterday and I'm still seeing it, again on X
> not wayland.
> 
> I do watch both netflix and prime video on this box, but I don't think I've
> seen it until the machine comes out of suspend.  Stopping firefox ends the
> journal output, but it continues immediately if restarted.
> 
> firefox-88.0-5.fc34.x86_64

I'm pretty much confident this is widevine DRM library spying around. I'm seeing this (only) running Spotify webplayer in Firefox. Closing the Spotify tab silences those "unexpected" file accesses. Probably the same for netflix and prime video.

Widevine Version: 4.10.2209.1

Comment 6 samoht0 2021-05-29 10:05:21 UTC
So, confirmed and fixed.
I'm on Widevine 4.10.1582.2 now (from November 2019 according to file date, latest version before 4.10.2209.x). And... silence. Also annoying playback drops 3...10 seconds after track start are gone. So I think, this is not a Firefox bug.
I'm staying on 4.10.1582.2 as log as Spotify accepts it, moving to Deezer, if playback will break in future (auto update off, downgrading again, if necessary).

I suggest to close this bug and provide some feedback here ("I found an issue and would like to file a bug report"):
https://support.google.com/widevine/troubleshooter/6027072

Maybe some attention on social media might help, too.

Comment 7 samoht0 2021-06-13 10:39:13 UTC
Well, Spotify doesn't accept Widevine 4.10.1582.2 (and lower) anymore. Playback stops, when the verification xhr post is done.
Good news for me, my current subscription ends in three days. Not using the service is the perfect DRM anyway. All win.
Deezer sign-up already done, runs perfectly without Widevine.

Comment 8 Danny 2021-07-08 11:15:47 UTC
Not just a Spotify thing, happens with Hulu and firefox-88.0.1-1.fc32.x86_64

Comment 9 Brian Kaye 2021-08-11 22:30:10 UTC
FC34 all latest patches.


I don't run Spotify or Netflix and I get lost of similar messages. Not just "/proc/self/maps"

Sometimes the messages come from ksmserver or plasmashell

ksmserver[24729]: Sandbox: attempt to open unexpected file /sys/devices/system/cpu/online
Aug 08 14:48:03 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/stat
Aug 08 14:48:03 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/net/unix
Aug 08 14:48:03 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/self/maps
Aug 08 14:48:03 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/self/maps
Aug 08 14:48:03 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/net/unix
Aug 08 14:48:03 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/net/unix
Aug 08 14:48:03 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/net/unix
Aug 08 14:48:03 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/net/unix
Aug 08 14:48:03 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/net/unix
Aug 08 14:48:03 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/net/unix
Aug 08 14:48:03 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/self/maps
Aug 08 14:48:03 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/net/unix
Aug 08 14:48:03 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/self/maps
Aug 08 14:48:03 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/net/unix
Aug 08 14:48:03 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/net/unix
Aug 08 14:48:03 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/self/maps
Aug 08 14:48:04 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/self/maps
Aug 08 14:48:04 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/net/unix
Aug 08 14:48:04 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/self/maps
Aug 08 14:48:04 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/net/unix
Aug 08 14:48:04 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/net/unix
Aug 08 14:48:04 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/self/maps
Aug 08 14:48:04 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/net/unix
Aug 08 14:48:04 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/self/maps
Aug 08 14:48:04 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/self/maps
Aug 08 14:48:04 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/self/maps
Aug 08 14:48:04 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/self/maps
Aug 08 14:48:04 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/self/maps
Aug 08 14:48:04 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/self/maps
Aug 08 14:48:04 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/self/maps
Aug 08 14:48:04 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/net/unix
Aug 08 14:48:04 mars ksmserver[24729]: Sandbox: attempt to open unexpected file /proc/net/unix
Aug 08 14:48:04 mars ksmserver[24729]

Comment 10 samoht0 2021-08-22 07:50:29 UTC
(In reply to Brian Kaye from comment #9)
> FC34 all latest patches.
> 
> 
> I don't run Spotify or Netflix and I get lost of similar messages. Not just
> "/proc/self/maps"
> 

Just disable Widevine or better HTML5 DRM completely, restart firefox and check it angain. I'm pretty much confident you're just using another service, that requires Widevine.

https://support.mozilla.org/en-US/kb/enable-drm

Comment 11 Mads Kiilerich 2021-08-25 20:23:24 UTC
This is tracked upstream on https://bugzilla.mozilla.org/show_bug.cgi?id=1712506 , and https://phabricator.services.mozilla.com/D123562 should resolve the issue "soon".

Comment 12 Mads Kiilerich 2021-11-03 21:43:38 UTC
I no longer see this problem. DRM works with SE enforcing (at least after deleting all "gmp-widevinecdm" folders and relabelling).


Note You need to log in before you can comment on or make changes to this bug.