github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 6

[GH-ISSUE #2292] Spotify doesn't launch on Arch Linux #1529

New issue
Closed
opened 2026-05-05 08:11:27 -06:00 by gitea-mirror · 7 comments
gitea-mirror commented 2026-05-05 08:11:27 -06:00
Owner
Copy link

Originally created by @Algebro7 on GitHub (Dec 6, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2292

I'm using the spotify package from the AUR with firejail, no customizations to the firejail profile and I'm getting the following error:

$ firejail spotify
Reading profile /etc/firejail/spotify.profile
Reading profile /etc/firejail/globals.local
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 1218, child pid 1219
Warning: skipping pki for private /etc
Warning: skipping crypto-policies for private /etc
Private /etc installed in 24.30 ms
Warning: skipping spotify for private /opt
Private /opt installed in 0.03 ms
5 programs installed in 4.33 ms
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Warning: /sbin directory link was not blacklisted
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Blacklist violations are logged to syslog
Child process initialized in 98.02 ms
/usr/local/bin/spotify: line 2: /usr/share/spotify/spotify: Permission denied

I tried whitelisting /usr/share/spotify but that didn't make any difference. Is there something special I need to do to make this work with the AUR package?

Originally created by @Algebro7 on GitHub (Dec 6, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/2292 I'm using the `spotify` package from the AUR with firejail, no customizations to the firejail profile and I'm getting the following error: ``` $ firejail spotify Reading profile /etc/firejail/spotify.profile Reading profile /etc/firejail/globals.local Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-passwdmgr.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-var-common.inc Parent pid 1218, child pid 1219 Warning: skipping pki for private /etc Warning: skipping crypto-policies for private /etc Private /etc installed in 24.30 ms Warning: skipping spotify for private /opt Private /opt installed in 0.03 ms 5 programs installed in 4.33 ms Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. Warning: /sbin directory link was not blacklisted Warning: /sbin directory link was not blacklisted Warning: /usr/sbin directory link was not blacklisted Blacklist violations are logged to syslog Child process initialized in 98.02 ms /usr/local/bin/spotify: line 2: /usr/share/spotify/spotify: Permission denied ``` I tried whitelisting `/usr/share/spotify` but that didn't make any difference. Is there something special I need to do to make this work with the AUR package?
gitea-mirror commented 2026-05-05 08:11:29 -06:00
Author
Owner
Copy link

@polyzen commented on GitHub (Dec 6, 2018):

How'd you install Spotify? Works here with the spotify-stable AUR package.

<!-- gh-comment-id:445059400 --> @polyzen commented on GitHub (Dec 6, 2018): How'd you install Spotify? Works here with the `spotify-stable` AUR package.
gitea-mirror commented 2026-05-05 08:11:30 -06:00
Author
Owner
Copy link

@Algebro7 commented on GitHub (Dec 7, 2018):

Thanks a bunch for the information--I switched to spotify-stable and it's working now.

<!-- gh-comment-id:445078831 --> @Algebro7 commented on GitHub (Dec 7, 2018): Thanks a bunch for the information--I switched to `spotify-stable` and it's working now.
gitea-mirror commented 2026-05-05 08:11:32 -06:00
Author
Owner
Copy link

@Fred-Barclay commented on GitHub (Dec 8, 2018):

In case we see this later -- what version of firejail are you using? I'm using the latest build from git (0.9.57) and firejail spotify works without errors (and I have the ordinary spotify package from the AUR, not spotify-stable).

Thanks!

<!-- gh-comment-id:445477097 --> @Fred-Barclay commented on GitHub (Dec 8, 2018): In case we see this later -- what version of firejail are you using? I'm using the latest build from git (0.9.57) and `firejail spotify` works without errors (and I have the ordinary spotify package from the AUR, not spotify-stable). Thanks!
gitea-mirror commented 2026-05-05 08:11:33 -06:00
Author
Owner
Copy link

@polyzen commented on GitHub (Dec 8, 2018):

On December 8, 2018 12:50:22 PM EST, Fred Barclay notifications@github.com wrote:

In case we see this later -- what version of firejail are you using?
I'm using the latest build from git (0.9.57) and firejail spotify
works without errors (and I have the ordinary spotify package from the
AUR, not spotify-stable).

Thanks!

--
You are receiving this because you commented.
Reply to this email directly or view it on GitHub:
https://github.com/netblue30/firejail/issues/2292#issuecomment-445477097

Seems like they used a different install method.

--
Best,
polyzen

<!-- gh-comment-id:445477289 --> @polyzen commented on GitHub (Dec 8, 2018): On December 8, 2018 12:50:22 PM EST, Fred Barclay <notifications@github.com> wrote: >In case we see this later -- what version of firejail are you using? >I'm using the latest build from git (0.9.57) and `firejail spotify` >works without errors (and I have the ordinary spotify package from the >AUR, not spotify-stable). > >Thanks! > >-- >You are receiving this because you commented. >Reply to this email directly or view it on GitHub: >https://github.com/netblue30/firejail/issues/2292#issuecomment-445477097 Seems like they used a different install method. -- Best, polyzen
gitea-mirror commented 2026-05-05 08:11:33 -06:00
Author
Owner
Copy link

@Algebro7 commented on GitHub (Dec 8, 2018):

I was using the regular spotify package as well as firejail-apparmor, both from AUR. Looks like firejail version 0.9.56. It is possible the spotify installation got messed up over time as I recall there being some issues with ffmpeg awhile back that I had to manually resolve.

<!-- gh-comment-id:445477560 --> @Algebro7 commented on GitHub (Dec 8, 2018): I was using the regular `spotify` package as well as `firejail-apparmor`, both from AUR. Looks like firejail version 0.9.56. It is possible the spotify installation got messed up over time as I recall there being some issues with `ffmpeg` awhile back that I had to manually resolve.
gitea-mirror commented 2026-05-05 08:11:34 -06:00
Author
Owner
Copy link

@Fred-Barclay commented on GitHub (Dec 8, 2018):

Thanks! As an uneducated guess I'd suspect some incompatibility with firejail-apparmor. ;)

<!-- gh-comment-id:445478295 --> @Fred-Barclay commented on GitHub (Dec 8, 2018): Thanks! As an uneducated guess I'd suspect some incompatibility with `firejail-apparmor`. ;)
gitea-mirror commented 2026-05-05 08:11:36 -06:00
Author
Owner
Copy link

@Vincent43 commented on GitHub (Dec 8, 2018):

When spotify is used with --apparmor option, you need to add /usr/share/spotify/** ix, rule in /etc/apparmor.d/local/firejail-local.

spotify-stable isn't affected by this as it installs binary under /opt/spotify instead of /usr/share/spotify.

apparmor isn't enabled by default in spotify profile so you had to explicitly enable it somewhere.

<!-- gh-comment-id:445482101 --> @Vincent43 commented on GitHub (Dec 8, 2018): When spotify is used with `--apparmor` option, you need to add `/usr/share/spotify/** ix,` rule in `/etc/apparmor.d/local/firejail-local`. `spotify-stable` isn't affected by this as it installs binary under `/opt/spotify` instead of `/usr/share/spotify`. `apparmor` isn't enabled by default in [spotify profile](https://github.com/netblue30/firejail/blob/master/etc/spotify.profile) so you had to explicitly enable it somewhere.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
master
serialize_remounts_v2
landlock_v4
landlock
release-0.9.64
release-0.9.62
gitlab_ci
LTSbase
fred_ctests
docs
0.9.80
0.9.80-rc1
0.9.78
0.9.76
0.9.76-rc4
0.9.76-rc3
0.9.76-rc2
0.9.76-rc1
0.9.74
landlock-split
0.9.72
0.9.72rc1
0.9.70
0.9.68
0.9.68rc1
0.9.66
0.9.66rc1
0.9.64.4
0.9.64.2
0.9.64
0.9.64rc1
0.9.62.4
0.9.62.2
0.9.62
0.9.56.2-LTS
0.9.60
0.9.60-rc1
0.9.58.2
0.9.58
0.9.58-rc1
0.9.56-LTS-release
0.9.56-LTS
0.9.56
0.9.56-rc1
0.9.54
0.9.54-rc2
0.9.54-rc1
0.9.52
0.9.38.12
0.9.50
0.9.50-rc1
0.9.48
0.9.46
0.9.46-rc1
0.9.44.10
0.9.44.8
0.9.44.6
0.9.38.10
0.9.44.4
0.9.38.8
0.9.44.2
0.9.44
0.9.44-rc1
0.9.38.4
0.9.42
0.9.42-rc2
0.9.38.2
0.9.42-rc1
disable-globalcfg
0.9.40
0.9.40-rc1
0.9.38
0.9.38-rc1
0.9.36
0.9.36-rc1
0.9.34
0.9.34-rc1
0.9.32
0.9.32-rc1
0.9.30
0.9.30-rc1
Labels
Clear labels   
LTS merge

   
LTS merge

   
bug

   
bug

   
converted-to-discussion

   
doc-todo

   
documentation

   
duplicate

   
enhancement

   
file-transfer

   
firecfg

   
firejail-in-firejail

   
firetools

   
graphics

   
help wanted

   
information_old

   
installation

   
invalid

   
modif

   
moved

   
needinfo

   
networking

   
notabug

   
notourbug

   
old-version

   
overlayfs

   
packaging

   
profile-request

   
pull-request

Mirrored from GitHub Pull Request

  
question

   
question_old

   
removal

   
runtime-permissions

   
sandbox-ipc

   
security

   
stale

   
wiki

   
wiki

   
wontfix

   
wordpress

   
workaround
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1529
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?