{"action":"created","issue":{"url":"https://api.github.com/repos/netblue30/firejail/issues/189","labels_url":"https://api.github.com/repos/netblue30/firejail/issues/189/labels{/name}","comments_url":"https://api.github.com/repos/netblue30/firejail/issues/189/comments","events_url":"https://api.github.com/repos/netblue30/firejail/issues/189/events","html_url":"https://github.com/netblue30/firejail/issues/189","id":120724066,"number":189,"title":"\"existing sandbox detected\" error when upgrading 0.9.28 -> 0.9.32","user":{"login":"webslim","id":14113513,"avatar_url":"https://avatars.githubusercontent.com/u/14113513?v=3","gravatar_id":"","url":"https://api.github.com/users/webslim","html_url":"https://github.com/webslim","followers_url":"https://api.github.com/users/webslim/followers","following_url":"https://api.github.com/users/webslim/following{/other_user}","gists_url":"https://api.github.com/users/webslim/gists{/gist_id}","starred_url":"https://api.github.com/users/webslim/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/webslim/subscriptions","organizations_url":"https://api.github.com/users/webslim/orgs","repos_url":"https://api.github.com/users/webslim/repos","events_url":"https://api.github.com/users/webslim/events{/privacy}","received_events_url":"https://api.github.com/users/webslim/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/netblue30/firejail/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-12-07T08:40:01Z","updated_at":"2015-12-17T12:57:31Z","closed_at":null,"body":"Hi,\r\nmy way to use firejail is to 'su' to a user and then enter a sandbox with\r\n   firejail --noroot --caps.drop=all --seccomp --ipc-namespace\r\n(If I want GUI separation, I do this in a Xephyr window.)\r\nThis used to work perfectly up to version 0.9.28.\r\nThe new version outputs a message about an existing sandbox and running without additional restrictions,\r\neven though there is no other sandbox running. 'firejail --list' shows nothing.\r\nI have a Grsecurity enabled kernel and came across https://github.com/netblue30/firejail/issues/141, but I am wondering why this used to work even though I have CONFIG_GRKERNSEC_PROC_USER=y. Did something change in the handling of /proc information?"},"comment":{"url":"https://api.github.com/repos/netblue30/firejail/issues/comments/165446152","html_url":"https://github.com/netblue30/firejail/issues/189#issuecomment-165446152","issue_url":"https://api.github.com/repos/netblue30/firejail/issues/189","id":165446152,"user":{"login":"netblue30","id":13711990,"avatar_url":"https://avatars.githubusercontent.com/u/13711990?v=3","gravatar_id":"","url":"https://api.github.com/users/netblue30","html_url":"https://github.com/netblue30","followers_url":"https://api.github.com/users/netblue30/followers","following_url":"https://api.github.com/users/netblue30/following{/other_user}","gists_url":"https://api.github.com/users/netblue30/gists{/gist_id}","starred_url":"https://api.github.com/users/netblue30/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/netblue30/subscriptions","organizations_url":"https://api.github.com/users/netblue30/orgs","repos_url":"https://api.github.com/users/netblue30/repos","events_url":"https://api.github.com/users/netblue30/events{/privacy}","received_events_url":"https://api.github.com/users/netblue30/received_events","type":"User","site_admin":false},"created_at":"2015-12-17T12:57:31Z","updated_at":"2015-12-17T12:57:31Z","body":"If I understand correctly, you want to be able to run firejail in a Docker/LXC/whatever container. All I have to do is to disable the checking and let it running. I'll implement it for the next version. Thanks."}}