[GH-ISSUE #1807] Arch-Linux - 'steam-native' doesn't read /etc/firejail/steam.profile #1227

Closed
opened 2026-05-05 07:41:15 -06:00 by gitea-mirror · 1 comment
Owner

Originally created by @ghost on GitHub (Mar 11, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1807

Hi there!

After almost a year away from Linux, I'm back. I tried running "Steam Native" and encountered a problem: it doesn't automatically read '/etc/firejail/steam.profile'.

I've been on this for hours. I commented all lines except for the "noblacklist" ones, then I changed all "noblacklist" words to "whitelist". I then added all Steam directories I have, and by the end I just left the "whitelist" lines (none of those 'private', 'tmp' or whatever).

Still, after running "firejail steam-native" it says "rm: cannot remove '/home/amarildo/.steam/steam': Permission denied".

And running it with --debug shows:

Found default profile in /etc/firejail directory
Reading profile /etc/firejail/default.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc

Disable /home/amarildo/.steam
Disable /home/amarildo/.local/share/Steam
Dropping all capabilities
configuring 14 seccomp entries in /run/firejail/mnt/seccomp.protocol

As if it's not reading my Steam.profile at all.

EDIT: Then I tried running the default steam.profile, "firejail --profile=/etc/firejail/steam.profile steam-native", and it worked.

Is this something the Arch devs must change, or you can change Firejail's code so that it recognizes when "firejail steam-native" runs? Because currently if you run that command, firejail will just apply the default profile to Steam and it will fail to initialize.

Cheers

Originally created by @ghost on GitHub (Mar 11, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/1807 Hi there! After almost a year away from Linux, I'm back. I tried running "Steam Native" and encountered a problem: it doesn't automatically read '/etc/firejail/steam.profile'. I've been on this for hours. I commented all lines except for the "noblacklist" ones, then I changed all "noblacklist" words to "whitelist". I then added all Steam directories I have, and by the end I just left the "whitelist" lines (none of those 'private', 'tmp' or whatever). Still, after running "_firejail steam-native_" it says "_rm: cannot remove '/home/amarildo/.steam/steam': Permission denied_". And running it with --debug shows: ``` Found default profile in /etc/firejail directory Reading profile /etc/firejail/default.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-passwdmgr.inc Reading profile /etc/firejail/disable-programs.inc Disable /home/amarildo/.steam Disable /home/amarildo/.local/share/Steam Dropping all capabilities configuring 14 seccomp entries in /run/firejail/mnt/seccomp.protocol ``` As if it's not reading my Steam.profile at all. EDIT: Then I tried running the default steam.profile, "**firejail --profile=/etc/firejail/steam.profile steam-native**", and it worked. Is this something the Arch devs must change, or you can change Firejail's code so that it recognizes when "firejail steam-native" runs? Because currently if you run that command, firejail will just apply the default profile to Steam and it will fail to initialize. Cheers
Author
Owner

@SkewedZeppelin commented on GitHub (Mar 11, 2018):

They seem to have changed their steam-native script. It used to just launch /usr/bin/steam with some extra arguments, which was firejailed if you'd ran firecfg.

I've added an alias in 66f8903a08. You can either yaourt -S firejail-git or the following

mkdir -p .config/firejail
cp /etc/firejail/steam.profile .config/firejail/steam-native.profile
sudo firecfg
<!-- gh-comment-id:372088725 --> @SkewedZeppelin commented on GitHub (Mar 11, 2018): They seem to have changed their steam-native script. It used to just launch /usr/bin/steam with some extra arguments, which was firejailed if you'd ran `firecfg`. I've added an alias in 66f8903a088ba61304ca909d61860659569b66d5. You can either `yaourt -S firejail-git` or the following ``` mkdir -p .config/firejail cp /etc/firejail/steam.profile .config/firejail/steam-native.profile sudo firecfg ```
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1227
No description provided.