[GH-ISSUE #3790] xfce4-screenshooter - profile broken by memory-deny-write-execute #2394

Closed
opened 2026-05-05 09:04:16 -06:00 by gitea-mirror · 4 comments
Owner

Originally created by @itoffshore on GitHub (Dec 6, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3790

LSB Version:    1.4
Distributor ID: EndeavourOS
Description:    EndeavourOS Linux (Arch Linux)
Release:        rolling
Codename:       n/a

firejail version 0.9.64

Compile time support:
        - AppArmor support is enabled
        - AppImage support is enabled
        - chroot support is enabled
        - D-BUS proxy support is enabled
        - file and directory whitelisting support is enabled
        - file transfer support is enabled
        - firetunnel support is enabled
        - networking support is enabled
        - overlayfs support is enabled
        - private-home support is enabled
        - SELinux support is disabled
        - user namespace support is enabled
        - X11 sandboxing support is enabled

I was able to fix it by creating /etc/firejail/xfce4-screenshooter.local & adding:

ignore memory-deny-write-execute

Originally created by @itoffshore on GitHub (Dec 6, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3790 ``` LSB Version: 1.4 Distributor ID: EndeavourOS Description: EndeavourOS Linux (Arch Linux) Release: rolling Codename: n/a firejail version 0.9.64 Compile time support: - AppArmor support is enabled - AppImage support is enabled - chroot support is enabled - D-BUS proxy support is enabled - file and directory whitelisting support is enabled - file transfer support is enabled - firetunnel support is enabled - networking support is enabled - overlayfs support is enabled - private-home support is enabled - SELinux support is disabled - user namespace support is enabled - X11 sandboxing support is enabled ``` I was able to fix it by creating `/etc/firejail/xfce4-screenshooter.local` & adding: `ignore memory-deny-write-execute`
Author
Owner

@rusty-snake commented on GitHub (Dec 6, 2020):

Thanks for reporting. 458e2ad6b0.

MDWE commonly breaks GUIs. GTK/GDKs Wayland implementation and a few other.

<!-- gh-comment-id:739560667 --> @rusty-snake commented on GitHub (Dec 6, 2020): Thanks for reporting. https://github.com/netblue30/firejail/commit/458e2ad6b04bd2b77cd93f3cecd0f95e72d47bfa. MDWE commonly breaks GUIs. GTK/GDKs Wayland implementation and a few other.
Author
Owner

@itoffshore commented on GitHub (Dec 6, 2020):

@rusty-snake - I think it should be removed from it's profile as it is a GUI app

<!-- gh-comment-id:739560979 --> @itoffshore commented on GitHub (Dec 6, 2020): @rusty-snake - I think it should be removed from it's profile as it is a GUI app
Author
Owner

@rusty-snake commented on GitHub (Dec 7, 2020):

Why should it be removed?

<!-- gh-comment-id:739916664 --> @rusty-snake commented on GitHub (Dec 7, 2020): Why should it be removed?
Author
Owner

@itoffshore commented on GitHub (Dec 7, 2020):

commenting it out as has been done in 458e2ad6b0 has the same effect

Otherwise the app runs like:
firejail-screenshooter

instead of:

firejail-screenshooter2

<!-- gh-comment-id:739920768 --> @itoffshore commented on GitHub (Dec 7, 2020): commenting it out as has been done in https://github.com/netblue30/firejail/commit/458e2ad6b04bd2b77cd93f3cecd0f95e72d47bfa has the same effect Otherwise the app runs like: ![firejail-screenshooter](https://user-images.githubusercontent.com/1141947/101356931-adf6a280-3890-11eb-9ef5-862aa05c3422.png) instead of: ![firejail-screenshooter2](https://user-images.githubusercontent.com/1141947/101357183-0332b400-3891-11eb-823c-2a7ffa120a33.png)
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2394
No description provided.