github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #4506] Freetube does not start #2688

New issue

Closed

opened 2026-05-05 09:20:53 -06:00 by gitea-mirror · 4 comments

gitea-mirror commented

2026-05-05 09:20:53 -06:00

Owner

Originally created by @toby63 on GitHub (Sep 3, 2021).
Original GitHub issue: https://github.com/netblue30/firejail/issues/4506

Bug and expected behavior

Freetube does not start, see below for details.

No profile and disabling firejail

What changed calling firejail --noprofile /path/to/program in a terminal?
Program starts as expected.
What changed calling the program by path (e.g. /usr/bin/vlc)?
Nothing.

Reproduce

Steps to reproduce the behavior:

Run in bash firejail freetube
See error Cannot start application: Permission denied

Environment

Linux distribution:
Arch Linux
Firejail version (output of firejail --version) exclusive or used git commit (git rev-parse HEAD):
Development version built from AUR package firejail-git:
commit a44fa49cb
(Also a problem with version: 0.9.66)
Freetube version:
0.13.2

Additional context

Checklist

The profile (and redirect profile if exists) hasn't already been fixed upstream.
The program has a profile. (If not, request one in https://github.com/netblue30/firejail/issues/1139)
I have performed a short search for similar issues (to avoid opening a duplicate).
If it is a AppImage, --profile=PROFILENAME is used to set the right profile.
Used LC_ALL=en_US.UTF-8 LANG=en_US.UTF-8 PROGRAM to get english error-messages.
I'm aware of browser-allow-drm yes/browser-disable-u2f no in firejail.config to allow DRM/U2F in browsers.
This is not a question. Questions should be asked in https://github.com/netblue30/firejail/discussions.

Log

debug output

firejail freetube:

Reading profile /etc/firejail/freetube.profile
Reading profile /etc/firejail/disable-shell.inc
Reading profile /etc/firejail/electron.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/disable-xdg.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-runuser-common.inc
Reading profile /etc/firejail/whitelist-usr-share-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Warning: Warning: NVIDIA card detected, nogroups command disabled
Parent pid 27029, child pid 27031
10 programs installed in 43.56 ms
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Warning: skipping alternatives for private /etc
Warning: skipping asound.conf for private /etc
Warning: skipping crypto-policies for private /etc
Warning: skipping pki for private /etc
Private /etc installed in 355.86 ms
Private /usr/etc installed in 0.00 ms
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Child process initialized in 546.62 ms
Cannot start application: Permission denied

Parent is shutting down, bye...

firejail --debug freetube:

I can add that later, if needed (the log contains too much information about my system for my taste, so I have to make that in a seperate environment ;) ).

Originally created by @toby63 on GitHub (Sep 3, 2021). Original GitHub issue: https://github.com/netblue30/firejail/issues/4506 ### Bug and expected behavior Freetube does not start, see below for details. ### No profile and disabling firejail - What changed calling `firejail --noprofile /path/to/program` in a terminal? Program starts as expected. - What changed calling the program by path (e.g. `/usr/bin/vlc`)? Nothing. ### Reproduce Steps to reproduce the behavior: 1. Run in bash `firejail freetube` 2. See error `Cannot start application: Permission denied` ### Environment - Linux distribution: Arch Linux - Firejail version (output of `firejail --version`) exclusive or used git commit (`git rev-parse HEAD`): Development version built from AUR package firejail-git: commit a44fa49cb (Also a problem with version: 0.9.66) - Freetube version: 0.13.2 ### Additional context - ### Checklist - [x] The profile (and redirect profile if exists) hasn't already been fixed [upstream](https://github.com/netblue30/firejail/tree/master/etc). - [x] The program has a profile. (If not, request one in `https://github.com/netblue30/firejail/issues/1139`) - [x] I have performed a short search for similar issues (to avoid opening a duplicate). - If it is a AppImage, `--profile=PROFILENAME` is used to set the right profile. - Used `LC_ALL=en_US.UTF-8 LANG=en_US.UTF-8 PROGRAM` to get english error-messages. - [x] I'm aware of `browser-allow-drm yes`/`browser-disable-u2f no` in `firejail.config` to allow DRM/U2F in browsers. - [x] This is not a question. Questions should be asked in https://github.com/netblue30/firejail/discussions. ### Log <details> <summary>debug output</summary> <p> firejail freetube: ``` Reading profile /etc/firejail/freetube.profile Reading profile /etc/firejail/disable-shell.inc Reading profile /etc/firejail/electron.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-exec.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/disable-xdg.inc Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-runuser-common.inc Reading profile /etc/firejail/whitelist-usr-share-common.inc Reading profile /etc/firejail/whitelist-var-common.inc Warning: Warning: NVIDIA card detected, nogroups command disabled Parent pid 27029, child pid 27031 10 programs installed in 43.56 ms Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. Warning: skipping alternatives for private /etc Warning: skipping asound.conf for private /etc Warning: skipping crypto-policies for private /etc Warning: skipping pki for private /etc Private /etc installed in 355.86 ms Private /usr/etc installed in 0.00 ms Warning: /sbin directory link was not blacklisted Warning: /usr/sbin directory link was not blacklisted Child process initialized in 546.62 ms Cannot start application: Permission denied Parent is shutting down, bye... ``` firejail --debug freetube: ``` I can add that later, if needed (the log contains too much information about my system for my taste, so I have to make that in a seperate environment ;) ). ``` </p> </details>

gitea-mirror closed this issue

2026-05-05 09:20:53 -06:00

gitea-mirror commented

2026-05-05 09:20:55 -06:00

Author

Owner

@rusty-snake commented on GitHub (Sep 3, 2021):

How did you installed freetube?

@rusty-snake commented on GitHub (Sep 3, 2021): How did you installed freetube?

gitea-mirror commented

2026-05-05 09:20:56 -06:00

Author

Owner

@toby63 commented on GitHub (Sep 3, 2021):

Via AUR package.

@toby63 commented on GitHub (Sep 3, 2021): Via [AUR package](http://aur.archlinux.org/packages/freetube).

gitea-mirror commented

2026-05-05 09:20:57 -06:00

Author

Owner

@rusty-snake commented on GitHub (Sep 3, 2021):

Does it work if you include allow-bin-sh.inc+private-bin sh?

--- a/etc/profile-a-l/freetube.profile
+++ b/etc/profile-a-l/freetube.profile
@@ -8,12 +8,14 @@ include globals.local
 
 noblacklist ${HOME}/.config/FreeTube
 
+include allow-bin-sh.inc
+
 include disable-shell.inc
 
 mkdir ${HOME}/.config/FreeTube
 whitelist ${HOME}/.config/FreeTube
 
-private-bin electron,electron[0-9],electron[0-9][0-9],freetube
+private-bin electron,electron[0-9],electron[0-9][0-9],freetube,sh
 private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,mime.types,nsswitch.conf,pki,pulse,resolv.conf,ssl,X11,xdg

@rusty-snake commented on GitHub (Sep 3, 2021): Does it work if you `include allow-bin-sh.inc`+`private-bin sh`? ```diff --- a/etc/profile-a-l/freetube.profile +++ b/etc/profile-a-l/freetube.profile @@ -8,12 +8,14 @@ include globals.local noblacklist ${HOME}/.config/FreeTube +include allow-bin-sh.inc + include disable-shell.inc mkdir ${HOME}/.config/FreeTube whitelist ${HOME}/.config/FreeTube -private-bin electron,electron[0-9],electron[0-9][0-9],freetube +private-bin electron,electron[0-9],electron[0-9][0-9],freetube,sh private-etc alsa,alternatives,asound.conf,ca-certificates,crypto-policies,fonts,gtk-2.0,gtk-3.0,host.conf,hostname,hosts,mime.types,nsswitch.conf,pki,pulse,resolv.conf,ssl,X11,xdg ```

gitea-mirror commented

2026-05-05 09:20:59 -06:00

Author

Owner

@toby63 commented on GitHub (Sep 3, 2021):

It works, thank you very much.

@toby63 commented on GitHub (Sep 3, 2021): It works, thank you very much.

gitea-mirror referenced this issue

2026-05-05 10:20:59 -06:00

[PR #2688] [MERGED] nodbus enhancements #4485

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2688

No description provided.

Rows
Columns