mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #4039] patch: program fails to run on Artix Linux #2514
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#2514
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @ZachIndigo on GitHub (Mar 3, 2021).
Original GitHub issue: https://github.com/netblue30/firejail/issues/4039
Write clear, concise and in textual form.
Bug and expected behavior
Patch always fails to run, complains about missing libdl.so.2 library (which is installed and in /usr/lib).
I expected the patch command to work properly.
No profile and disabling firejail
firejail --noprofile /path/to/programin a terminal?Patch works properly, no complaint about missing library.
which <program>orfirejail --listwhile the sandbox is running)?Patch works correctly, no complaint about missing library.
Reproduce
Steps to reproduce the behavior:
firejail patch/usr/sbin/patch: error while loading shared libraries: libdl.so.2: cannot open shared object file: No such file or directoryEnvironment
lsb_release -a,screenfetchorcat /etc/os-release)Artix Linux (fork of Arch), up-to-date
firejail --version) exclusive or used git commit (git rev-parse HEAD)Firejail version 0.9.64.4
Additional context
Other context about the problem like related errors to understand the problem.
Patch will also start to work if I comment out the 'private-lib' line in the config.
Checklist
Trying the master-branch patch.profile does not fix the issue either.
https://github.com/netblue30/firejail/issues/1139)I am using the upstream patch.profile
--profile=PROFILENAMEis used to set the right profile.It is not an appimage.
Used
LC_ALL=en_US.UTF-8 LANG=en_US.UTF-8 PROGRAMto get english error-messages.I'm aware of
browser-allow-drm yes/browser-disable-u2f noinfirejail.configto allow DRM/U2F in browsers.debug output
@rusty-snake commented on GitHub (Mar 3, 2021):
What shows
ls -l /usr/lib*/libdl*?@rusty-snake commented on GitHub (Mar 3, 2021):
What's in it?
@kmk3 commented on GitHub (Mar 3, 2021):
Same error with a relatively recent firejail-git version, also on Artix.
It has been fixed by #4000 on master:
https://github.com/zupatisc/firejail/blob/38a5cb1440e000545d7d5802da43170d55f6560b/etc/profile-m-z/patch.profile#L46
So put the following on patch.local:
Or, alternatively, use firejail-git from the AUR until the next release.
@ZachIndigo commented on GitHub (Mar 4, 2021):
Also, adding in 'ignore private-lib' worked, which is weird, because I copied the Master branch patch.profile into my etc directory and it didn't work. But it is working now, so thanks.
Edit: Fixed code block formatting.
@kmk3 commented on GitHub (Mar 4, 2021):
Apologies; I wanted to reply quickly and ended up speaking assuming too much
and without properly testing my suggestions. #4000 by itself does not really
fix it on Artix and the problem still happens on the current master.
It fails even with the following on patch.local:
So it's also likely not due to the file names (though it could be a globbing
issue).
I have the same output and it does not seem quite right. Why are these
libraries owned by dhcpcd when it is not the provider of any of them?
dhcpcd does not even provide any libraries outside of its own directory:
I think that the problem might be packaging-related. Will check later.
@rusty-snake commented on GitHub (May 12, 2021):
@kmk3 ping
Could it be #3236?
@kmk3 commented on GitHub (May 14, 2021):
Sorry for the delay, but I still have some patches that I want to send
beforehand (some are even from months ago). If anybody wants to take this in
the meantime feel free to do so.
Currently I just run
unlink /usr/local/bin/patchafter runningfirecfg.Would be nice if firecfg supported a
/etc/firejail/firecfg_ignore.configcounterpart to
/usr/lib/firejail/firecfg.config, to skip problematicprofiles.
To be clear, I meant issues with the dhcpcd package.
By the way, I stopped using dhcpcd, as it would happily and knowingly let the
clock drift over an hour without syncing. And there is no way to force it to
sync.
Seems plausible; thanks for the link.
@rusty-snake commented on GitHub (May 14, 2021):
And here's an other link for you: #2097 😃