github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #3449] Consider adding "Allow Python" to Steam.profile so Blender runs #2167

New issue

Closed

opened 2026-05-05 08:50:55 -06:00 by gitea-mirror · 3 comments

gitea-mirror commented

2026-05-05 08:50:55 -06:00

Owner

Originally created by @ghost on GitHub (Jun 4, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3449

EDIT: Didn't really solve the problem, and there are already two identical lines in the profile.
I'll just use Blender without Steam until I find out more about this issue.

Hi there!

Let me apologize for the simple bug report. I'm a 3D artist who uses Blender via Steam on Linux and I don't have much time to go deep into this, but I believe there's no real need to do so. Here's why:

Steam just updated Blender to version 2.83, which was freezing my laptop then proceeding to crash itself (Blender). After a bit of experimentation, I found that Blender works fine with the default profile, so there could be something going on with the Steam profile.

The solution was simple, add the following two lines to Steam.profile:

# Allow python (blacklisted by disable-interpreters.inc)
include allow-python2.inc
include allow-python3.inc

These lines are in Blender's default profile, and they allow the program's addons to run (which AFAIK are all in Python).

Since Blender is an official product on Steam and is used by many people on Steam's community, I think it makes sense to add these two lines for the Steam.profile file.

Cheers!

Originally created by @ghost on GitHub (Jun 4, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3449 EDIT: Didn't really solve the problem, and there are already two identical lines in the profile. I'll just use Blender without Steam until I find out more about this issue. --------------------------- Hi there! Let me apologize for the simple bug report. I'm a 3D artist who uses Blender via Steam on Linux and I don't have much time to go deep into this, but I believe there's no real need to do so. Here's why: Steam just updated Blender to version 2.83, which was freezing my laptop then proceeding to crash itself (Blender). After a bit of experimentation, I found that Blender works fine with the default profile, so there could be something going on with the Steam profile. The solution was simple, add the following two lines to Steam.profile: ``` # Allow python (blacklisted by disable-interpreters.inc) include allow-python2.inc include allow-python3.inc ``` These lines are in Blender's default profile, and they allow the program's addons to run (which AFAIK are all in Python). Since Blender is an official product on Steam and is used by many people on Steam's community, I think it makes sense to add these two lines for the Steam.profile file. Cheers!

gitea-mirror closed this issue

2026-05-05 08:50:55 -06:00

gitea-mirror commented

2026-05-05 08:50:57 -06:00

Author

Owner

@rusty-snake commented on GitHub (Jun 4, 2020):

Hi, what is your firejail version? Can you create ~/.config/firejail/steam.local with this content:

ignore private-etc

noblacklist ${HOME}/.config/blender
mkdir ${HOME}/.config/blender
whitelist ${HOME}/.config/blender

noblacklist /sys/module
whitelist /sys/module/amdgpu
read-only /sys/module/amdgpu

If you use firejail <0.9.63 remove the whitelist ${HOME}/.config/blender.

@rusty-snake commented on GitHub (Jun 4, 2020): Hi, what is your firejail version? Can you create `~/.config/firejail/steam.local` with this content: ``` ignore private-etc noblacklist ${HOME}/.config/blender mkdir ${HOME}/.config/blender whitelist ${HOME}/.config/blender noblacklist /sys/module whitelist /sys/module/amdgpu read-only /sys/module/amdgpu ``` If you use firejail <0.9.63 remove the `whitelist ${HOME}/.config/blender`.

gitea-mirror commented

2026-05-05 08:50:58 -06:00

Author

Owner

@ghost commented on GitHub (Jun 4, 2020):

Hi! I'm using 0.9.62-3.

If I create that file, Steam doesn't start.

amanda@amanda:~$ firejail steam
Reading profile /etc/firejail/steam.profile
Reading profile /home/amanda/.config/firejail/steam.local
Reading profile /etc/firejail/allow-java.inc
Reading profile /etc/firejail/allow-python2.inc
Reading profile /etc/firejail/allow-python3.inc
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Warning: networking feature is disabled in Firejail configuration file
Parent pid 18819, child pid 18820
Warning: cleaning all supplementary groups
Warning: cleaning all supplementary groups
Warning: cleaning all supplementary groups
Warning: cleaning all supplementary groups
Child process initialized in 157.52 ms
/usr/games/steam: 74: /home/amanda/.steam/debian-installation/ubuntu12_32/steam: Permission denied
cat: '/home/amanda/.steam/debian-installation/ubuntu12_32/steam-runtime.tar.xz.part*': No such file or directory
tar: This does not look like a tar archive
xz: (stdin): File format not recognized
tar: Child returned status 1
tar: Error is not recoverable: exiting now
find: ‘/home/amanda/.steam/debian-installation/ubuntu12_32/steam-runtime’: No such file or directory

Parent is shutting down, bye...

EDIT: I removed the line anyway and Steam now starts. Let's see what happens.
EDIT2: Still freezing and crashing.

@ghost commented on GitHub (Jun 4, 2020): Hi! I'm using 0.9.62-3. If I create that file, Steam doesn't start. ``` amanda@amanda:~$ firejail steam Reading profile /etc/firejail/steam.profile Reading profile /home/amanda/.config/firejail/steam.local Reading profile /etc/firejail/allow-java.inc Reading profile /etc/firejail/allow-python2.inc Reading profile /etc/firejail/allow-python3.inc Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-passwdmgr.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-var-common.inc Warning: networking feature is disabled in Firejail configuration file Parent pid 18819, child pid 18820 Warning: cleaning all supplementary groups Warning: cleaning all supplementary groups Warning: cleaning all supplementary groups Warning: cleaning all supplementary groups Child process initialized in 157.52 ms /usr/games/steam: 74: /home/amanda/.steam/debian-installation/ubuntu12_32/steam: Permission denied cat: '/home/amanda/.steam/debian-installation/ubuntu12_32/steam-runtime.tar.xz.part*': No such file or directory tar: This does not look like a tar archive xz: (stdin): File format not recognized tar: Child returned status 1 tar: Error is not recoverable: exiting now find: ‘/home/amanda/.steam/debian-installation/ubuntu12_32/steam-runtime’: No such file or directory Parent is shutting down, bye... ``` EDIT: I removed the line anyway and Steam now starts. Let's see what happens. EDIT2: Still freezing and crashing.

gitea-mirror commented

2026-05-05 08:50:59 -06:00

Author

Owner

@ghost commented on GitHub (Jun 4, 2020):

I'd like to apologize for wasting everybody's time with this issue. It seems it's a Blender problem.

I tried a new download of the 2.83 build, ran it without firejail, and the problem happened as well but just took longer to happen.

I'll contact Blender's developers to see what's going on.

Thanks rusty-snake for trying to help.

@ghost commented on GitHub (Jun 4, 2020): I'd like to apologize for wasting everybody's time with this issue. It seems it's a Blender problem. I tried a new download of the 2.83 build, ran it without firejail, and the problem happened as well but just took longer to happen. I'll contact Blender's developers to see what's going on. Thanks rusty-snake for trying to help.

gitea-mirror referenced this issue

2026-05-05 10:15:30 -06:00

[PR #2167] [MERGED] Fix GTK theme and some hardening #4196

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2167

No description provided.

Rows
Columns