github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #2765] Steam on Fedora fails to open with firejail #1735

New issue

Closed

opened 2026-05-05 08:24:29 -06:00 by gitea-mirror · 7 comments

gitea-mirror commented

2026-05-05 08:24:29 -06:00

Owner

Originally created by @clara2g on GitHub (Jun 13, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2765

The error is "glXChooseVisual failed". It works without Firejail so I assume is a Firejail issue.

I'm running up to date Fedora 30 KDE with Firejail 0.9.56 and default Steam profile. My laptop has integrated Intel UHD Graphics 620.

Loving Firejail. Thank you :)

Originally created by @clara2g on GitHub (Jun 13, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/2765 The error is "glXChooseVisual failed". It works without Firejail so I assume is a Firejail issue. I'm running up to date Fedora 30 KDE with Firejail 0.9.56 and default Steam profile. My laptop has integrated Intel UHD Graphics 620. Loving Firejail. Thank you :)

gitea-mirror

2026-05-05 08:24:29 -06:00

closed this issue
added the
bug
label

gitea-mirror commented

2026-05-05 08:24:32 -06:00

Author

Owner

@rusty-snake commented on GitHub (Jun 13, 2019):

@clara2g does one of the following work?
firejail --noprofile steam
firejail --ignore=private-etc --ignore=private-dev --ignore=private-tmp steam

@rusty-snake commented on GitHub (Jun 13, 2019): @clara2g does one of the following work? `firejail --noprofile steam` `firejail --ignore=private-etc --ignore=private-dev --ignore=private-tmp steam`

gitea-mirror commented

2026-05-05 08:24:33 -06:00

Author

Owner

@clara2g commented on GitHub (Jun 13, 2019):

@rusty-snake the first one works, the second does not (fails with the same message)

@clara2g commented on GitHub (Jun 13, 2019): @rusty-snake the first one works, the second does not (fails with the same message)

gitea-mirror commented

2026-05-05 08:24:34 -06:00

Author

Owner

@rusty-snake commented on GitHub (Jun 13, 2019):

@clara2g OK. can you then comment all lines in your steam.profile and uncomment line for line and try after every uncomment. As an suggestion: start uncommenting with the includes or the options (caps.drop all to shell none).

@rusty-snake commented on GitHub (Jun 13, 2019): @clara2g OK. can you then comment all lines in your steam.profile and uncomment line for line and try after every uncomment. As an suggestion: start uncommenting with the includes or the options (`caps.drop all` to `shell none`).

gitea-mirror commented

2026-05-05 08:24:35 -06:00

Author

Owner

@clara2g commented on GitHub (Jun 13, 2019):

@rusty-snake is the "include disable-common.inc" line. That's a long file, I will test it tomorrow to find the problem there and post it. Thank you :)

@clara2g commented on GitHub (Jun 13, 2019): @rusty-snake is the "include disable-common.inc" line. That's a long file, I will test it tomorrow to find the problem there and post it. Thank you :)

gitea-mirror commented

2026-05-05 08:24:35 -06:00

Author

Owner

@rusty-snake commented on GitHub (Jun 13, 2019):

@clara2g first check journalctl -r.

If you realy try to find something in disable-common, search binary. I think that is may in one of this sections:

systemd
var
etc
system directories
system management

@rusty-snake commented on GitHub (Jun 13, 2019): @clara2g first check `journalctl -r`. If you realy try to find something in disable-common, search binary. I think that is may in one of this sections: ``` systemd var etc system directories system management ```

gitea-mirror commented

2026-05-05 08:24:36 -06:00

Author

Owner

@clara2g commented on GitHub (Jun 17, 2019):

Hi again, I've digged into this issue, the problem was the line blacklist /usr/sbin in the disable-common.inc but that's a whole directory so I created a new include file for all /usr/sbin/ files in order to track the specific binary and it is /usr/sbin/ldconfig.

I noticed that the Firejail's Steam profile already has a noblacklist /sbin. Adding the line noblacklist /usr/sbin below fixes the issue.

Is it possible to whitelist only this specific file instead of the removing the whole blacklinsting on /usr/sbin and /sbin sensitive folders?

I hope this is useful. Thank you.

@clara2g commented on GitHub (Jun 17, 2019): Hi again, I've digged into this issue, the problem was the line `blacklist /usr/sbin` in the disable-common.inc but that's a whole directory so I created a new include file for all _/usr/sbin/_ files in order to track the specific binary and it is _/usr/sbin/ldconfig_. I noticed that the Firejail's Steam profile already has a `noblacklist /sbin`. Adding the line `noblacklist /usr/sbin` below fixes the issue. Is it possible to whitelist only this specific file instead of the removing the whole blacklinsting on _/usr/sbin_ and _/sbin_ sensitive folders? I hope this is useful. Thank you.

gitea-mirror commented

2026-05-05 08:24:36 -06:00

Author

Owner

@rusty-snake commented on GitHub (Jun 17, 2019):

@clara2g

Adding the line noblacklist /usr/sbin below fixes the issue.

Your welcome to open a PR, to fix this.

Is it possible to whitelist only this specific file instead of the removing the whole blacklinsting on /usr/sbin and /sbin sensitive folders?

Yes, some very sensitve binary should still be blacklisted (I don't look which), for whitelisting:
0330e04ec3/etc/steam.profile (L61-L66)

Please do whitelisting only local on your machine with steam.local and don't include it in a PR.

@rusty-snake commented on GitHub (Jun 17, 2019): @clara2g > Adding the line `noblacklist /usr/sbin` below fixes the issue. Your welcome to open a PR, to fix this. > Is it possible to whitelist only this specific file instead of the removing the whole blacklinsting on /usr/sbin and /sbin sensitive folders? Yes, some very sensitve binary should still be blacklisted (I don't look which), for whitelisting: https://github.com/netblue30/firejail/blob/0330e04ec3eab46bb4150dbb593ca7d4ff1665cd/etc/steam.profile#L61-L66 _Please do whitelisting only local on your machine with `steam.local` and don't include it in a PR._

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1735

No description provided.

Rows
Columns