[GH-ISSUE #3049] Steam issue with internal browser #1916

Closed
opened 2026-05-05 08:35:07 -06:00 by gitea-mirror · 2 comments
Owner

Originally created by @Hnaguski on GitHub (Nov 21, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3049

I am running firejail 0.9.60 on Debian and am having a similar issue to what was described in https://github.com/netblue30/firejail/issues/1396 where the internal browser is just black.
2019-11-20-234705_1920x1080_scrot

I am running the program with firejail --private=~/.local/share/steam steam, would this cause issues? I have checked the steam.profile and it does have tracelog commented out but the issue persists. I have found that commenting out include disable-common.inc in steam.profile does seem to fix it, but I am unsure if this is a good idea to leave disabled.

Originally created by @Hnaguski on GitHub (Nov 21, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/3049 I am running firejail 0.9.60 on Debian and am having a similar issue to what was described in https://github.com/netblue30/firejail/issues/1396 where the internal browser is just black. ![2019-11-20-234705_1920x1080_scrot](https://user-images.githubusercontent.com/29007712/69353247-34bbeb80-0c4c-11ea-9067-7de2713eb230.png) I am running the program with `firejail --private=~/.local/share/steam steam`, would this cause issues? I have checked the steam.profile and it does have tracelog commented out but the issue persists. I have found that commenting out `include disable-common.inc` in steam.profile does seem to fix it, but I am unsure if this is a good idea to leave disabled.
Author
Owner

@rusty-snake commented on GitHub (Nov 22, 2019):

but I am unsure if this is a good idea to leave disabled.

In general removing disable-common.inc is a bad idea, since it protects files like .bashrc. That can end in sandbox-escape. Using --private is a mitigation against this, since the .bashrc read outside of the sandbox is an other .bashrc.

Sine disable-common.inc contains a lot of read-only and blacklist command, only one (or a bit more) read-write/noblacklist/ignore lines in steam.local would be needed to fix that. Can you find out which ro/bl line is the issue? (comment fist all ro (search and replace) and then all bl; or comment first the half file, and the the other half.) If steam starts with tracelog, you can also look in the syslog.

<!-- gh-comment-id:557630536 --> @rusty-snake commented on GitHub (Nov 22, 2019): > but I am unsure if this is a good idea to leave disabled. In general removing `disable-common.inc` is a bad idea, since it protects files like .bashrc. That can end in sandbox-escape. Using `--private` is a mitigation against this, since the .bashrc read outside of the sandbox is an other .bashrc. Sine `disable-common.inc` contains a lot of `read-only` and `blacklist` command, only one (or a bit more) `read-write`/`noblacklist`/`ignore` lines in steam.local would be needed to fix that. Can you find out which ro/bl line is the issue? (comment fist all ro (search and replace) and then all bl; or comment first the half file, and the the other half.) If steam starts with `tracelog`, you can also look in the syslog.
Author
Owner

@rusty-snake commented on GitHub (Jan 17, 2020):

I'm closing here due to inactivity, please fell free to reopen if you still have this issue.

<!-- gh-comment-id:575726382 --> @rusty-snake commented on GitHub (Jan 17, 2020): I'm closing here due to inactivity, please fell free to reopen if you still have this issue.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1916
No description provided.