[GH-ISSUE #3682] No blu-ray playback with vlc using libaacs #2317

New issue

Closed

opened 2026-05-05 09:00:33 -06:00 by gitea-mirror · 0 comments

gitea-mirror commented

2026-05-05 09:00:33 -06:00

Owner

Originally created by @jmetrius on GitHub (Oct 20, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3682

Bug and expected behavior
Using firejail with the default vlc.profile breaks blu-ray playback of encrypted blu-ray discs depending on libaacs:

Sandboxed VLC output:

keydbcfg.c:701: No valid AACS configuration files found
aacs.c:121: No usable AACS libraries found!
dec.c:197: aacs_open() failed: -2!

This happens because ~/.config/aacs (where the key database resides) is not accessible.

No profile and disabling firejail
Issue can't be reproduced when running with --noprofile

Reproduce
Steps to reproduce the behavior:

Run in bash firejail vlc
Try to play a protected blu-ray disc
blu-ray disc does not play, vlc complains about missing AACS database

Environment
Arch Linux with firejail version 0.9.64rc1

Additional context
This issue is fixed by creating /etc/firejail/vlc.local and whitelisting ~/.config/aacs

noblacklist ${HOME}/.config/aacs
whitelist ${HOME}/.config/aacs

Pull request to fix the default profile is attached.

Checklist

The upstream profile (and redirect profile if exists) have no changes fixing it.
The program has a profile. (If not, request one in # 1139)
Programs needed for interaction are listed in the profile.
A short search for duplicates was performed.

Originally created by @jmetrius on GitHub (Oct 20, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3682 **Bug and expected behavior** Using firejail with the default vlc.profile breaks blu-ray playback of encrypted blu-ray discs depending on libaacs: Sandboxed VLC output: ``` keydbcfg.c:701: No valid AACS configuration files found aacs.c:121: No usable AACS libraries found! dec.c:197: aacs_open() failed: -2! ``` This happens because ~/.config/aacs (where the key database resides) is not accessible. **No profile and disabling firejail** Issue can't be reproduced when running with --noprofile **Reproduce** Steps to reproduce the behavior: 1. Run in bash `firejail vlc` 2. Try to play a protected blu-ray disc 3. blu-ray disc does not play, vlc complains about missing AACS database **Environment** Arch Linux with firejail version 0.9.64rc1 **Additional context** This issue is fixed by creating /etc/firejail/vlc.local and whitelisting ~/.config/aacs ``` noblacklist ${HOME}/.config/aacs whitelist ${HOME}/.config/aacs ``` Pull request to fix the default profile is attached. **Checklist** - [X] The upstream profile (and redirect profile if exists) have no changes fixing it. - [X] The program has a profile. (If not, request one in [# 1139](https://github.com/netblue30/firejail/issues/1139)) - [X] Programs needed for interaction are listed in the profile. - [X] A short search for duplicates was performed.

gitea-mirror closed this issue

2026-05-05 09:00:34 -06:00

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2317

No description provided.

Rows
Columns