loffice

firejail --debug --trace --profile=.config/firejail/libreoffice.profile /usr/lib/libreoffice/program/soffice.bin
Reading profile .config/firejail/libreoffice.profile
Reading profile /home/nick/.config/firejail/common.inc
Reading profile /home/nick/.config/firejail/white.inc
Checking /bin/libreoffice
Checking /sbin/libreoffice
Checking /usr/bin/libreoffice
Checking /bin/sed
Checking /bin/sh
Checking /bin/basename
Checking /sbin/basename
Checking /usr/bin/basename
Checking /bin/dirname
Checking /sbin/dirname
Checking /usr/bin/dirname
Checking /bin/grep
Checking /bin/uname
Checking /bin/paperconf
Checking /sbin/paperconf
Checking /usr/bin/paperconf
Checking /bin/ls
Checking /bin/readlink
Checking /bin/pwd
Checking /etc/hosts
Checking /etc/mime.types
Checking /etc/fonts/
Checking /etc/mailcap
Checking /etc/xdg/
Checking /etc/gtk-3.0/
Checking /etc/resolv.conf
Checking /etc/X11/
Checking /etc/alternatives/
Checking /etc/libreoffice/
Command name #soffice.bin#
Parent pid 13888, child pid 13889
Initializing child process
PID namespace installed
Mounting tmpfs on /run/firejail/mnt directory
Mounting read-only /bin, /sbin, /lib, /lib32, /lib64, /usr, /etc, /var
Mounting tmpfs on /var/lock
Mounting tmpfs on /var/tmp
Mounting tmpfs on /var/log
Mounting tmpfs on /var/lib/dhcp
Mounting tmpfs on /var/lib/snmp
Mounting tmpfs on /var/lib/sudo
Create the new utmp file
Mount the new utmp file
Cleaning /home directory
Sanitizing /etc/passwd
Sanitizing /etc/group
Disable /etc/firejail
Disable /home/nick/.config/firejail
Mounting tmpfs on /dev
Create /dev/shm directory
Copying files in the new etc directory:
/run/firejail/mnt/cp -a --parents /etc/hosts /run/firejail/mnt
/run/firejail/mnt/cp -a --parents /etc/mime.types /run/firejail/mnt
/run/firejail/mnt/cp -a --parents /etc/fonts/ /run/firejail/mnt
/run/firejail/mnt/cp -a --parents /etc/mailcap /run/firejail/mnt
/run/firejail/mnt/cp -a --parents /etc/xdg/ /run/firejail/mnt
/run/firejail/mnt/cp -a --parents /etc/gtk-3.0/ /run/firejail/mnt
/run/firejail/mnt/cp -a --parents /etc/resolv.conf /run/firejail/mnt
/run/firejail/mnt/cp -a --parents /etc/X11/ /run/firejail/mnt
/run/firejail/mnt/cp -a --parents /etc/alternatives/ /run/firejail/mnt
/run/firejail/mnt/cp -a --parents /etc/libreoffice/ /run/firejail/mnt
Mount-bind /run/firejail/mnt/etc on top of /etc
Creating an empty /etc/ld.so.preload file
Copying files in the new home:
Checking /bin/libreoffice
Checking /sbin/libreoffice
Checking /usr/bin/libreoffice
/run/firejail/mnt/cp -a /usr/lib/libreoffice/program/soffice /run/firejail/mnt/bin/libreoffice
Checking /bin/sed
/run/firejail/mnt/cp -a /bin/sed /run/firejail/mnt/bin/sed
Checking /bin/sh
/run/firejail/mnt/cp -a /bin/dash /run/firejail/mnt/bin/sh
Checking /bin/basename
Checking /sbin/basename
Checking /usr/bin/basename
/run/firejail/mnt/cp -a /usr/bin/basename /run/firejail/mnt/bin/basename
Checking /bin/dirname
Checking /sbin/dirname
Checking /usr/bin/dirname
/run/firejail/mnt/cp -a /usr/bin/dirname /run/firejail/mnt/bin/dirname
Checking /bin/grep
/run/firejail/mnt/cp -a /bin/grep /run/firejail/mnt/bin/grep
Checking /bin/uname
/run/firejail/mnt/cp -a /bin/uname /run/firejail/mnt/bin/uname
Checking /bin/paperconf
Checking /sbin/paperconf
Checking /usr/bin/paperconf
/run/firejail/mnt/cp -a /usr/bin/paperconf /run/firejail/mnt/bin/paperconf
Checking /bin/ls
/run/firejail/mnt/cp -a /bin/ls /run/firejail/mnt/bin/ls
Checking /bin/readlink
/run/firejail/mnt/cp -a /bin/readlink /run/firejail/mnt/bin/readlink
Checking /bin/pwd
/run/firejail/mnt/cp -a /bin/pwd /run/firejail/mnt/bin/pwd
Mount-bind /run/firejail/mnt/bin on top of /bin
Mount-bind /run/firejail/mnt/bin on top of /sbin
Mount-bind /run/firejail/mnt/bin on top of /usr/bin
Mount-bind /run/firejail/mnt/bin on top of /usr/sbin
Debug 337: new_name #/tmp/.X11-unix#
Debug 337: new_name #/home/nick/.config/user-dirs.dirs#
Replaced whitelist path: whitelist /home/nick/.config/user-dirs.dirs
Debug 337: new_name #/home/nick/.config/user-dirs.locale#
Replaced whitelist path: whitelist /home/nick/.config/user-dirs.locale
Debug 337: new_name #/home/nick/.fonts#
Replaced whitelist path: whitelist /home/nick/.fonts
Debug 337: new_name #/home/nick/.config/gtk-3.0#
Replaced whitelist path: whitelist /home/nick/.config/gtk-3.0
Debug 337: new_name #/home/nick/.gtkrc-2.0#
Replaced whitelist path: whitelist /home/nick/.gtkrc-2.0
Debug 337: new_name #/home/nick/vp#
Replaced whitelist path: whitelist /home/nick/vp
Debug 337: new_name #/home/nick/.config/libreoffice#
Replaced whitelist path: whitelist /home/nick/.config/libreoffice
Debug 337: new_name #/home/nick/Documents#
Replaced whitelist path: whitelist /home/nick/Documents
Mounting a new /home directory
Mounting a new /root directory
Create a new user directory
Mounting tmpfs on /tmp directory
Whitelisting /tmp/.X11-unix
Whitelisting /home/nick/.config/user-dirs.dirs
Whitelisting /home/nick/.config/user-dirs.locale
Whitelisting /home/nick/.fonts
Whitelisting /home/nick/.config/gtk-3.0
Whitelisting /home/nick/.gtkrc-2.0
Whitelisting /home/nick/vp
Whitelisting /home/nick/.config/libreoffice
Whitelisting /home/nick/Documents
Warning: /var/backup is an invalid file, skipping...
Disable /var/spool/cron
Disable /var/spool/anacron
Disable /run/acpid.socket
Warning: /var/run/minissdpd.sock is an invalid file, skipping...
Warning: /var/run/rpcbind.sock is an invalid file, skipping...
Warning: /var/run/mysqld/mysqld.sock is an invalid file, skipping...
Warning: /var/run/mysql/mysqld.sock is an invalid file, skipping...
Warning: /var/lib/mysqld/mysql.sock is an invalid file, skipping...
Warning: /var/lib/mysql/mysql.sock is an invalid file, skipping...
Warning: /var/run/docker.sock is an invalid file, skipping...
Disable /var/log
Disable /usr/include
Disable /usr/share/perl
Disable /usr/share/perl5
Warning: /usr/share/php* is an invalid file, skipping...
Warning: /usr/lib/php* is an invalid file, skipping...
Warning: /usr/lib/ruby is an invalid file, skipping...
Not blacklist /usr/lib/python2.7
Not blacklist /usr/lib/python3
Not blacklist /usr/lib/python3.4
Not blacklist /usr/lib/python2.6
Not blacklist /usr/lib/python-tz
Not blacklist /usr/share/python
Disable /usr/share/java
Disable /usr/lib/mono
Disable /usr/share/mono
Warning: /usr/bin/nemo is an invalid file, skipping...
Warning: /usr/bin/xsel is an invalid file, skipping...
Disable /media
Disable /vids
Disable /opt
Mounting read-only /home/nick/.config/user-dirs.dirs
Mounting read-only /home/nick/.config/user-dirs.locale
Mounting read-only /home/nick/.fonts
Mounting read-only /home/nick/.config/gtk-3.0
Mounting read-only /home/nick/.gtkrc-2.0
Mounting read-only /home/nick/Documents
Create the new ld.so.preload file
Mount the new ld.so.preload file
Remounting /proc and /proc/sys filesystems
Remounting /sys directory
Disable /sys/firmware
Disable /sys/hypervisor
Disable /sys/fs
Disable /sys/module
Disable /sys/power
Disable /proc/sysrq-trigger
Disable /proc/sys/kernel/hotplug
Disable /sys/kernel/uevent_helper
Disable /proc/irq
Disable /proc/bus
Disable /proc/kcore
Disable /proc/kallsyms
Disable /boot directory
Disable /boot
Disable /proc/kmsg
Network namespace enabled, only loopback interface available

Set protocol filter: unix,inet
Dual i386/amd64 seccomp filter configured
SECCOMP Filter:
  VALIDATE_ARCHITECTURE
  EXAMINE_SYSCAL
  BLACKLIST 165 mount
  BLACKLIST 166 umount2
  BLACKLIST 101 ptrace
  BLACKLIST 246 kexec_load
  BLACKLIST 304 open_by_handle_at
  BLACKLIST 175 init_module
  BLACKLIST 176 delete_module
  BLACKLIST 172 iopl
  BLACKLIST 173 ioperm
  BLACKLIST 167 swapon
  BLACKLIST 168 swapoff
  BLACKLIST 103 syslog
  BLACKLIST 310 process_vm_readv
  BLACKLIST 311 process_vm_writev
  BLACKLIST 139 sysfs
  BLACKLIST 156 _sysctl
  BLACKLIST 159 adjtimex
  BLACKLIST 305 clock_adjtime
  BLACKLIST 212 lookup_dcookie
  BLACKLIST 298 perf_event_open
  BLACKLIST 300 fanotify_init
  BLACKLIST 248 add_key
  BLACKLIST 249 request_key
  BLACKLIST 250 keyctl
  BLACKLIST 134 uselib
  BLACKLIST 163 acct
  BLACKLIST 154 modify_ldt
  BLACKLIST 155 pivot_root
  BLACKLIST 206 io_setup
  BLACKLIST 207 io_destroy
  BLACKLIST 208 io_getevents
  BLACKLIST 209 io_submit
  BLACKLIST 210 io_cancel
  BLACKLIST 216 remap_file_pages
  BLACKLIST 237 mbind
  BLACKLIST 239 get_mempolicy
  BLACKLIST 238 set_mempolicy
  BLACKLIST 256 migrate_pages
  BLACKLIST 279 move_pages
  BLACKLIST 278 vmsplice
  BLACKLIST 161 chroot
  BLACKLIST 205 set_thread_area
  BLACKLIST 184 tuxcall
  BLACKLIST 169 reboot
  BLACKLIST 180 nfsservctl
  BLACKLIST 177 get_kernel_syms
  BLACKLIST 133 mknod
  BLACKLIST 135 personality
  RETURN_ALLOW
Save seccomp filter, size 808 bytes
Dropping all capabilities
noroot user namespace installed
execvp argument 0: /usr/lib/libreoffice/program/soffice.bin
Child process initialized
/usr/lib/libreoffice/program/soffice.bin: error while loading shared libraries: libGL.so.1: cannot open shared object file: No such file or directory
Sandbox monitor: waitpid 46 retval 46 status 32512

parent is shutting down, bye...