[GH-ISSUE #2210] Custom profile gives 'no such file or directory' error for existing script #1481

New issue

Closed

opened 2026-05-05 08:08:54 -06:00 by gitea-mirror · 1 comment

gitea-mirror commented

2026-05-05 08:08:54 -06:00

Owner

Originally created by @kozross on GitHub (Oct 21, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2210

Based on the advice given in #2119, I have the following custom profile for Darkest Dungeon:

# Profile for Darkest Dungeon

include /etc/firejail/disable-common.inc
include /etc/firejail/disable-devel.inc
include /etc/firejail/disable-passwdmgr.inc
include /etc/firejail/disable-programs.inc

caps.drop all
ipc-namespace
net none
nodbus
nodvd
nogroups
nonewprivs
notv
novideo
protocol unix
seccomp.drop modify_ldt,lookup_dcookie,perf_event_open,process_vm_writev,_sysctl,afs_syscall,create_module,get_kernel_syms,getpmsg,putpmsg,query_module,security,sysfs,tuxcall,uselib,ustat,vserver,adjtimex,clock_adjtime,clock_settime,settimeofday,delete_module,finit_module,init_module,ioperm,iopl,kexec_load,kexec_file_load,reboot,swapon,swapoff,acct,bpf,chroot,mount,nfsservctl,pivot_root,setdomainname,sethostname,umount2,vhangup,set_mempolicy,migrate_pages,move_pages,mbind,open_by_handle_at,ioprio_set,syslog,fanotify_init,kcmp,add_key,request_key,keyctl,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,vmsplice,personality,userfaultfd

private /home/koz/games
private-cache
private-dev
private-tmp

noexec /tmp

However, when I try to run start.sh (which is Darkest Dungeon's entry point), I get this:

[koz@Sebastian ~]$ firejail --profile=/home/koz/games/firejail-profiles/darkest-dungeon.profile /home/koz/games/gog/darkest-dungeon/start.sh 
Reading profile /home/koz/games/firejail-profiles/darkest-dungeon.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc
Parent pid 10472, child pid 10473
Post-exec seccomp protector enabled
Seccomp list in: modify_ldt,lookup_dcookie,perf_event_open,process_vm_writev,_sysctl,afs_syscall,create_module,get_kernel_syms,getpmsg,putpmsg,query_module,security,sysfs,tuxcall,uselib,ustat,vserver,adjtimex,clock_adjtime,clock_settime,settimeofday,delete_module,finit_module,init_module,ioperm,iopl,kexec_load,kexec_file_load,reboot,swapon,swapoff,acct,bpf,chroot,mount,nfsservctl,pivot_root,setdomainname,sethostname,umount2,vhangup,set_mempolicy,migrate_pages,move_pages,mbind,open_by_handle_at,ioprio_set,syslog,fanotify_init,kcmp,add_key,request_key,keyctl,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,vmsplice,personality,userfaultfd, check list: @default-keep, prelist: modify_ldt,lookup_dcookie,perf_event_open,process_vm_writev,_sysctl,afs_syscall,create_module,get_kernel_syms,getpmsg,putpmsg,query_module,security,sysfs,tuxcall,uselib,ustat,vserver,adjtimex,clock_adjtime,clock_settime,settimeofday,delete_module,finit_module,init_module,ioperm,iopl,kexec_load,kexec_file_load,reboot,swapon,swapoff,acct,bpf,chroot,mount,nfsservctl,pivot_root,setdomainname,sethostname,umount2,vhangup,set_mempolicy,migrate_pages,move_pages,mbind,open_by_handle_at,ioprio_set,syslog,fanotify_init,kcmp,add_key,request_key,keyctl,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,vmsplice,personality,userfaultfd,
Child process initialized in 118.93 ms
/bin/bash: /home/koz/games/gog/darkest-dungeon/start.sh: No such file or directory

Parent is shutting down, bye...

Why is this happening?

Originally created by @kozross on GitHub (Oct 21, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/2210 Based on the advice given in #2119, I have the following custom profile for Darkest Dungeon: ``` # Profile for Darkest Dungeon include /etc/firejail/disable-common.inc include /etc/firejail/disable-devel.inc include /etc/firejail/disable-passwdmgr.inc include /etc/firejail/disable-programs.inc caps.drop all ipc-namespace net none nodbus nodvd nogroups nonewprivs notv novideo protocol unix seccomp.drop modify_ldt,lookup_dcookie,perf_event_open,process_vm_writev,_sysctl,afs_syscall,create_module,get_kernel_syms,getpmsg,putpmsg,query_module,security,sysfs,tuxcall,uselib,ustat,vserver,adjtimex,clock_adjtime,clock_settime,settimeofday,delete_module,finit_module,init_module,ioperm,iopl,kexec_load,kexec_file_load,reboot,swapon,swapoff,acct,bpf,chroot,mount,nfsservctl,pivot_root,setdomainname,sethostname,umount2,vhangup,set_mempolicy,migrate_pages,move_pages,mbind,open_by_handle_at,ioprio_set,syslog,fanotify_init,kcmp,add_key,request_key,keyctl,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,vmsplice,personality,userfaultfd private /home/koz/games private-cache private-dev private-tmp noexec /tmp ``` However, when I try to run ``start.sh`` (which is Darkest Dungeon's entry point), I get this: ``` [koz@Sebastian ~]$ firejail --profile=/home/koz/games/firejail-profiles/darkest-dungeon.profile /home/koz/games/gog/darkest-dungeon/start.sh Reading profile /home/koz/games/firejail-profiles/darkest-dungeon.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-passwdmgr.inc Reading profile /etc/firejail/disable-programs.inc Parent pid 10472, child pid 10473 Post-exec seccomp protector enabled Seccomp list in: modify_ldt,lookup_dcookie,perf_event_open,process_vm_writev,_sysctl,afs_syscall,create_module,get_kernel_syms,getpmsg,putpmsg,query_module,security,sysfs,tuxcall,uselib,ustat,vserver,adjtimex,clock_adjtime,clock_settime,settimeofday,delete_module,finit_module,init_module,ioperm,iopl,kexec_load,kexec_file_load,reboot,swapon,swapoff,acct,bpf,chroot,mount,nfsservctl,pivot_root,setdomainname,sethostname,umount2,vhangup,set_mempolicy,migrate_pages,move_pages,mbind,open_by_handle_at,ioprio_set,syslog,fanotify_init,kcmp,add_key,request_key,keyctl,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,vmsplice,personality,userfaultfd, check list: @default-keep, prelist: modify_ldt,lookup_dcookie,perf_event_open,process_vm_writev,_sysctl,afs_syscall,create_module,get_kernel_syms,getpmsg,putpmsg,query_module,security,sysfs,tuxcall,uselib,ustat,vserver,adjtimex,clock_adjtime,clock_settime,settimeofday,delete_module,finit_module,init_module,ioperm,iopl,kexec_load,kexec_file_load,reboot,swapon,swapoff,acct,bpf,chroot,mount,nfsservctl,pivot_root,setdomainname,sethostname,umount2,vhangup,set_mempolicy,migrate_pages,move_pages,mbind,open_by_handle_at,ioprio_set,syslog,fanotify_init,kcmp,add_key,request_key,keyctl,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,vmsplice,personality,userfaultfd, Child process initialized in 118.93 ms /bin/bash: /home/koz/games/gog/darkest-dungeon/start.sh: No such file or directory Parent is shutting down, bye... ``` Why is this happening?

gitea-mirror closed this issue

2026-05-05 08:08:55 -06:00

gitea-mirror commented

2026-05-05 08:08:57 -06:00

Author

Owner

@kozross commented on GitHub (Oct 21, 2018):

Looks like if I use a private HOME, I need to give the path as if from there, not from the 'outer' HOME. Sorry about that - closing.

@kozross commented on GitHub (Oct 21, 2018): Looks like if I use a private HOME, I need to give the path as if from there, not from the 'outer' HOME. Sorry about that - closing.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1481

No description provided.

Rows
Columns