mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #1602] private-lib must be disabled for hexchat to start #1069
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#1069
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Ryujinra on GitHub (Oct 12, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1602
On Archlinux, private-lib must be disabled or hexchat complains about python encodings missing.
Relevant part of error:
Could not find platform independent libraries
Could not find platform dependent libraries <exec_prefix>
Consider setting $PYTHONHOME to [:<exec_prefix>]
Fatal Python error: Py_Initialize: Unable to get the locale encoding
ModuleNotFoundError: No module named 'encodings'
@SkewedZeppelin commented on GitHub (Oct 13, 2017):
Do you happen to have any plugins enabled?
@Fred-Barclay commented on GitHub (Oct 13, 2017):
@Ryujinra It does seem to be an issue with a python library (without plugins, hexchat starts with no problems on my Arch system). Do you also have to comment out
private-bin?@SpotComms I recall we recently had a discussion about hexchat & python plugins 😁. Since our private-bin filter also should break python plugins, if we disable private-lib solely for the sake of plugins we would probably have to disable private-bin as well.
@Fred-Barclay commented on GitHub (Oct 13, 2017):
@Ryujinra Come to think of it, could you try to replace your
private-libline with the following?private-lib python3.6,libpython3.6m.so.1.0@Ryujinra commented on GitHub (Oct 13, 2017):
@SpotComms @Fred-Barclay Yes it appears the Python plugin is enabled, though I don't remember ever loading it manually. It seems Python is enabled in the PKGBUILD for hexchat in community repo: community/hexchat
Disabling private-bin is not necessary for me.
Of course, the default plugins like sysinfo are also enabled.
@Fred-Barclay Using the line
private-lib python3.6,libpython3.6m.so.1.0does indeed fix the issue.@netblue30 commented on GitHub (Oct 14, 2017):
I have removed private-lib from xchat, it looks like we have problems with python. I also removed memory-deny-write-execute, it breaks python consistently at least on Debian.
Fixed fcopy warnings, nice bug! It was in private-bin from the beginning. On Arch /bin and /usr/bin are pointing to the same directory and we ended up installing private-bin executables twice.
I'll bring in some more private-lib programs and see how is going. GTK 2 and 3 and Qt4 should work fine on all distros. So far we have problems with Qt5 (Arch and Ubuntu 17.04, Debian stable seems to be fine) and python (also on Arch, Debian stable is ok).
b0a97b9df5