Skypeforlinux 8.51.0.72 crashes on startup since it's not permitted to use the chroot syscall

[lolomokakus]

Running Firejail 0.9.60 on Arch linux. I'm not sure why Skype requires this, but adding a seccomp.drop line in skypeforlinux.local with all syscalls in the default list except for chroot makes it work.

My skypeforlinux.local:

whitelist ${HOME}/.config/skypeforlinux
whitelist ${DESKTOP}
whitelist ${DOWNLOADS}
whitelist /dev/disk
whitelist /dev/dri
whitelist /dev/null
whitelist /dev/random
whitelist /dev/shm
whitelist /dev/urandom
whitelist /dev/video0
whitelist /dev/video1
include whitelist-common.inc
seccomp.drop _sysctl,acct,add_key,adjtimex,afs_syscall,bdflush,bpf,break,clock_adjtime,clock_settime,create_module,delete_module,fanotify_init,finit_module,ftime,get_kernel_syms,getpmsg,gtty,init_module,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioperm,iopl,ioprio_set,kcmp,kexec_file_load,kexec_load,keyctl,lock,lookup_dcookie,mbind,migrate_pages,modify_ldt,mount,move_pages,mpx,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,pciconfig_iobase,pciconfig_read,pciconfig_write,perf_event_open,personality,pivot_root,process_vm_readv,process_vm_writev,prof,profil,ptrace,putpmsg,query_module,reboot,remap_file_pages,request_key,rtas,s390_mmio_read,s390_mmio_write,s390_runtime_instr,security,set_mempolicy,setdomainname,sethostname,settimeofday,sgetmask,ssetmask,stime,stty,subpage_prot,swapoff,swapon,switch_endian,sys_debug_setcontext,sysfs,syslog,tuxcall,ulimit,umount,umount2,uselib,userfaultfd,ustat,vhangup,vm86,vm86old,vmsplice,vserver
ignore apparmor

[rusty-snake]

Related to #2854 and #2821 ?all? electron apps now need this.

[lolomokakus]

Yeah, that's probably it. Just running strace -fe chroot electron gave me this:

[pid 31860] chroot("/proc/self/fdinfo/") = 0

before even the usage information was printed.