[GH-ISSUE #1961] --allusers not working with vlc.profile after upgrading 0.9.52 -> 0.9.54 #1315

Closed
opened 2026-05-05 07:51:15 -06:00 by gitea-mirror · 3 comments
Owner

Originally created by @fld on GitHub (May 27, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1961

I have media files under /home/debian-deluged/ with permissions debian-deluged:debian-deluged 770 and my user belongs to the group.

To get VLC working for those files under firejail 0.9.52, I had done:
% cat .config/firejail/vlc.profile

name vlc

# Disable inet,inet6 support
protocol unix,netlink

# Allow access /home/*
allusers

include /etc/firejail/vlc.profile
#apparmor

But after upgrading to 0.9.54 I'm getting Permission denied when trying to access videos under /home/debian-deluged/ and none of the --debug-* --noblacklist... etc. has helped. I was forced to downgrade back to .52.

Originally created by @fld on GitHub (May 27, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/1961 I have media files under /home/debian-deluged/ with permissions debian-deluged:debian-deluged 770 and my user belongs to the group. To get VLC working for those files under firejail 0.9.52, I had done: % cat .config/firejail/vlc.profile ``` name vlc # Disable inet,inet6 support protocol unix,netlink # Allow access /home/* allusers include /etc/firejail/vlc.profile #apparmor ``` But after upgrading to 0.9.54 I'm getting Permission denied when trying to access videos under /home/debian-deluged/ and none of the --debug-* --noblacklist... etc. has helped. I was forced to downgrade back to .52.
Author
Owner

@Vincent43 commented on GitHub (May 27, 2018):

Does it work when you run vlc as: firejail --noprofile --allusers vlc? If yes then look at /etc/firejail/vlc.profile and try disabling things one by one until you find out which causes this.

<!-- gh-comment-id:392330938 --> @Vincent43 commented on GitHub (May 27, 2018): Does it work when you run vlc as: `firejail --noprofile --allusers vlc`? If yes then look at `/etc/firejail/vlc.profile` and try disabling things one by one until you find out which causes this.
Author
Owner

@fld commented on GitHub (May 27, 2018):

it does in fact work with --noprofile --allusers, so I did as you suggested and figured out that 'noroot' is causing it.

<!-- gh-comment-id:392352544 --> @fld commented on GitHub (May 27, 2018): it does in fact work with --noprofile --allusers, so I did as you suggested and figured out that 'noroot' is causing it.
Author
Owner

@Vincent43 commented on GitHub (May 27, 2018):

Then you may add ignore noroot line to .config/firejail/vlc.profile.

<!-- gh-comment-id:392380946 --> @Vincent43 commented on GitHub (May 27, 2018): Then you may add `ignore noroot` line to `.config/firejail/vlc.profile`.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1315
No description provided.