mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #2726] obs: program does not start (private-bin) #1716
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#1716
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Edu4rdSHL on GitHub (May 27, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2726
The following error is present when launching obs studio using the firejail profile:
@SkewedZeppelin commented on GitHub (May 27, 2019):
The private-bin will need to be updated
can you try the following as a workaround for now?
sudo sed -i 's/private-bin/#private-bin/' /etc/firejail/obs.profile;@Edu4rdSHL commented on GitHub (May 27, 2019):
Done, now I got:
@SkewedZeppelin commented on GitHub (May 27, 2019):
sudo sed -i 's/include disable-exec.inc/#include disable-exec.inc' /etc/firejail/obs.profile;?@Edu4rdSHL commented on GitHub (May 27, 2019):
Same error:
And JFYI: add / to
#include disable-exec.incin the sed command, it sould be:sudo sed -i 's/include disable-exec.inc/#include disable-exec.inc/' /etc/firejail/obs.profile;@rusty-snake commented on GitHub (May 27, 2019):
@Edu4rdSHL what is in your
/etc/firejail/globals.local?@Edu4rdSHL commented on GitHub (May 28, 2019):
@Vincent43 commented on GitHub (May 28, 2019):
@Edu4rdSHL add
/usr/share/obs/** ix,to/etc/apparmor.d/local/firejail-localthen runsudo apparmor_parser -r /etc/apparmor.d/firejail-default@Edu4rdSHL commented on GitHub (May 30, 2019):
AppArmor parser error for /etc/apparmor.d/firejail-default in /etc/apparmor.d/firejail-default at line 164: syntax error, unexpected TOK_CLOSE, expecting TOK_END_OF_RULE
Edit:
Adding
/usr/share/obs/** ix,worked. Now I got:sechacklabs@SecHackLabs ~> obs
Reading profile /etc/firejail/obs.profile
Reading profile /etc/firejail/globals.local
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/disable-xdg.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 4104, child pid 4105
77 programs installed in 38.15 ms
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Blacklist violations are logged to syslog
Child process initialized in 81.93 ms
Attempted path: share/obs/obs-studio/locale/en-US.ini
Attempted path: /usr/share/obs/obs-studio/locale/en-US.ini
Attempted path: share/obs/obs-studio/locale.ini
Attempted path: /usr/share/obs/obs-studio/locale.ini
Attempted path: share/obs/obs-studio/themes/Dark.qss
Attempted path: /usr/share/obs/obs-studio/themes/Dark.qss
info: CPU Name: Intel(R) Core(TM) i7-7500U CPU @ 2.70GHz
info: CPU Speed: 3500.106MHz
info: Physical Cores: 2, Logical Cores: 4
info: Physical Memory: 19957MB Total, 17763MB Free
info: Kernel Version: Linux 5.1.5-zen1-2-zen
info: Distribution: "Arch Linux" Unknown
info: Window System: X11.0, Vendor: The X.Org Foundation, Version: 1.20.4
info: Portable mode: false
QMetaObject::connectSlotsByName: No matching signal for on_advAudioProps_clicked()
QMetaObject::connectSlotsByName: No matching signal for on_advAudioProps_destroyed()
QMetaObject::connectSlotsByName: No matching signal for on_program_customContextMenuRequested(QPoint)
info: OBS 23.1.0-1 (linux)
info: ---------------------------------
info: ---------------------------------
info: audio settings reset:
samples per sec: 44100
speakers: 2
info: ---------------------------------
info: Initializing OpenGL...
info: Loading up OpenGL on adapter Intel Open Source Technology Center Mesa DRI Intel(R) HD Graphics 620 (Kaby Lake GT2)
info: OpenGL loaded successfully, version 4.5 (Core Profile) Mesa 19.0.5, shading language 4.50
info: ---------------------------------
info: video settings reset:
base resolution: 1366x768
output resolution: 1364x768
downscale filter: Bicubic
fps: 60/1
format: NV12
YUV mode: 601/Partial
info: NV12 texture support not available
info: Audio monitoring device:
name: Default
id: default
info: ---------------------------------
warning: Failed to load 'en-US' text for module: 'decklink-ouput-ui.so'
libDeckLinkAPI.so: cannot open shared object file: No such file or directory
info: No blackmagic support
error: os_dlopen(libnvidia-encode.so.1->libnvidia-encode.so.1): libnvidia-encode.so.1: cannot open shared object file: No such file or directory
info: FFMPEG VAAPI supported
info: VLC found, VLC video source enabled
error: os_dlopen(/home/sechacklabs/.config/obs-studio/plugins/obs-linuxbrowser/bin/64bit/libobs-linuxbrowser.so->/home/sechacklabs/.config/obs-studio/plugins/obs-linuxbrowser/bin/64bit/libobs-linuxbrowser.so): /home/sechacklabs/.config/obs-studio/plugins/obs-linuxbrowser/bin/64bit/libobs-linuxbrowser.so: failed to map segment from shared object
warning: Module '/home/sechacklabs/.config/obs-studio/plugins/obs-linuxbrowser/bin/64bit/libobs-linuxbrowser.so' not loaded
info: ---------------------------------
info: Loaded Modules:
info: vlc-video.so
info: text-freetype2.so
info: rtmp-services.so
info: obs-x264.so
info: obs-transitions.so
info: obs-outputs.so
info: obs-libfdk.so
info: obs-filters.so
info: obs-ffmpeg.so
info: linux-v4l2.so
info: linux-pulseaudio.so
info: linux-jack.so
info: linux-decklink.so
info: linux-capture.so
info: linux-alsa.so
info: image-source.so
info: frontend-tools.so
info: decklink-ouput-ui.so
info: ---------------------------------
info: ==== Startup complete ===============================================
info: All scene data cleared
info: ------------------------------------------------
info: pulse-input: Server name: 'pulseaudio 12.2'
info: pulse-input: Audio format: s16le, 44100 Hz, 2 channels
info: pulse-input: Started recording from 'alsa_output.pci-0000_00_1f.3.analog-stereo.monitor'
info: pulse-input: Server name: 'pulseaudio 12.2'
info: pulse-input: Audio format: s16le, 44100 Hz, 2 channels
info: pulse-input: Started recording from 'alsa_input.pci-0000_00_1f.3.analog-stereo'
info: xshm-input: Geometry 1366x768 @ 0,0
error: Source ID 'linuxbrowser-source' not found
error: Failed to create source 'External Camera'!
info: Switched to scene 'Scene'
info: ------------------------------------------------
info: Loaded scenes:
info: - scene 'Scene':
info: - source: 'Screen Capture (XSHM)' (xshm_input)
info: - source: 'External Camera' (linuxbrowser-source)
info: ------------------------------------------------
Attempted path: share/obs/obs-studio/images/overflow.png
Attempted path: /usr/share/obs/obs-studio/images/overflow.png
info: adding 23 milliseconds of audio buffering, total audio buffering is now 23 milliseconds (source: Desktop Audio)
info: adding 23 milliseconds of audio buffering, total audio buffering is now 46 milliseconds (source: Mic/Aux)
info: ---------------------------------
info: [x264 encoder: 'simple_h264_recording'] preset: veryfast
info: [x264 encoder: 'simple_h264_recording'] profile: high
info: [x264 encoder: 'simple_h264_recording'] settings:
rate_control: CRF
bitrate: 0
buffer size: 0
crf: 14
fps_num: 60
fps_den: 1
width: 1364
height: 768
keyint: 250
info: libfdk_aac encoder created
info: libfdk_aac bitrate: 128, channels: 2
warning: [ffmpeg muxer: 'simple_file_output'] Failed to create process pipe
@Vincent43 commented on GitHub (May 30, 2019):
What if you run
firejail --ignore=apparmor obs?@Edu4rdSHL commented on GitHub (May 31, 2019):
Same result:
@Fred-Barclay commented on GitHub (Jul 9, 2019):
@Edu4rdSHL Can you check that
fe8f43e0d7fixes this? It seems fine on my Arch system.@Edu4rdSHL commented on GitHub (Jul 12, 2019):
@Fred-Barclay it worked, but you can remove
bashfrom there.@Fred-Barclay commented on GitHub (Jul 12, 2019):
Thanks @Edu4rdSHL 😄
Usually when we add
shtoprivate-binwe addbashas well (some programs won't work if the default shell is bash and it's not included in private-bin)@Edu4rdSHL commented on GitHub (Jul 12, 2019):
Ok, thank you, I don't know about that :). Great fix.