github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 06:06:02 -06:00

[GH-ISSUE #4707] elinks on Arch complains about missing access to liblua #2759

New issue

Closed

opened 2026-05-05 09:25:19 -06:00 by gitea-mirror · 5 comments

gitea-mirror commented

2026-05-05 09:25:19 -06:00

Owner

Originally created by @jose1711 on GitHub (Nov 22, 2021).
Original GitHub issue: https://github.com/netblue30/firejail/issues/4707

Description

Getting the following error message when executing elinks:

$ elinks
fopen: Permission denied
/usr/bin/elinks: error while loading shared libraries: liblua.so.5.4: cannot open shared object file: Permission denied

Steps to Reproduce

Run in bash LC_ALL=C firejail elinks
Receive the error message

Expected behavior

Program should run normally.

Actual behavior

Error appears.

Behavior without a profile

Works fine.

Additional context

Seems to be caused by disabling interpreters in links-common.profile. Placing the following links to elinks.profile resolves the situation:

ignore blacklist ${PATH}/lua*
ignore blacklist /usr/include/lua*
ignore blacklist /usr/lib/liblua*
ignore blacklist /usr/lib/lua
ignore blacklist /usr/lib64/liblua*
ignore blacklist /usr/lib64/lua
ignore blacklist /usr/share/lua*

Environment

Arch Linux x86_64 rolling
firejail version 0.9.67 (a6672757d)

Checklist

The issues is caused by firejail (i.e. running the program by path (e.g. /usr/bin/vlc) "fixes" it).
I can reproduce the issue without custom modifications (e.g. globals.local).
The program has a profile. (If not, request one in https://github.com/netblue30/firejail/issues/1139)
The profile (and redirect profile if exists) hasn't already been fixed upstream.
I have performed a short search for similar issues (to avoid opening a duplicate).
- I'm aware of browser-allow-drm yes/browser-disable-u2f no in firejail.config to allow DRM/U2F in browsers.
I used --profile=PROFILENAME to set the right profile. (Only relevant for AppImages)

Log

not required

Originally created by @jose1711 on GitHub (Nov 22, 2021). Original GitHub issue: https://github.com/netblue30/firejail/issues/4707 ### Description Getting the following error message when executing `elinks`: ``` $ elinks fopen: Permission denied /usr/bin/elinks: error while loading shared libraries: liblua.so.5.4: cannot open shared object file: Permission denied ``` ### Steps to Reproduce 1. Run in bash `LC_ALL=C firejail elinks` 2. Receive the error message ### Expected behavior Program should run normally. ### Actual behavior Error appears. ### Behavior without a profile Works fine. ### Additional context Seems to be caused by disabling interpreters in `links-common.profile`. Placing the following links to `elinks.profile` resolves the situation: ``` ignore blacklist ${PATH}/lua* ignore blacklist /usr/include/lua* ignore blacklist /usr/lib/liblua* ignore blacklist /usr/lib/lua ignore blacklist /usr/lib64/liblua* ignore blacklist /usr/lib64/lua ignore blacklist /usr/share/lua* ``` ### Environment - Arch Linux x86_64 rolling - firejail version 0.9.67 (a6672757d) ### Checklist - [x] The issues is caused by firejail (i.e. running the program by path (e.g. `/usr/bin/vlc`) "fixes" it). - [x] I can reproduce the issue without custom modifications (e.g. globals.local). - [x] The program has a profile. (If not, request one in `https://github.com/netblue30/firejail/issues/1139`) - [x] The profile (and redirect profile if exists) hasn't already been fixed [upstream](https://github.com/netblue30/firejail/tree/master/etc). - [x] I have performed a short search for similar issues (to avoid opening a duplicate). - [x] I'm aware of `browser-allow-drm yes`/`browser-disable-u2f no` in `firejail.config` to allow DRM/U2F in browsers. - [ ] I used `--profile=PROFILENAME` to set the right profile. (Only relevant for AppImages) ### Log not required

gitea-mirror closed this issue

2026-05-05 09:25:20 -06:00

gitea-mirror commented

2026-05-05 09:25:22 -06:00

Author

Owner

@rusty-snake commented on GitHub (Nov 22, 2021):

Seems to be caused by disabling interpreters in links-common.profile. Placing the following links to elinks.profile resolves the situation:
ignore blacklist ${PATH}/lua*
ignore blacklist /usr/include/lua*
ignore blacklist /usr/lib/liblua*
ignore blacklist /usr/lib/lua
ignore blacklist /usr/lib64/liblua*
ignore blacklist /usr/lib64/lua
ignore blacklist /usr/share/lua*

include allow-lua.inc 😉

@rusty-snake commented on GitHub (Nov 22, 2021): > Seems to be caused by disabling interpreters in links-common.profile. Placing the following links to elinks.profile resolves the situation: > ``` > ignore blacklist ${PATH}/lua* > ignore blacklist /usr/include/lua* > ignore blacklist /usr/lib/liblua* > ignore blacklist /usr/lib/lua > ignore blacklist /usr/lib64/liblua* > ignore blacklist /usr/lib64/lua > ignore blacklist /usr/share/lua* > ``` `include allow-lua.inc` :wink:

gitea-mirror commented

2026-05-05 09:25:23 -06:00

Author

Owner

@jose1711 commented on GitHub (Nov 22, 2021):

Seems to be caused by disabling interpreters in links-common.profile. Placing the following links to elinks.profile resolves the situation:
ignore blacklist ${PATH}/lua*
ignore blacklist /usr/include/lua*
ignore blacklist /usr/lib/liblua*
ignore blacklist /usr/lib/lua
ignore blacklist /usr/lib64/liblua*
ignore blacklist /usr/lib64/lua
ignore blacklist /usr/share/lua*
include allow-lua.inc wink

aw.. 😄

@jose1711 commented on GitHub (Nov 22, 2021): > > Seems to be caused by disabling interpreters in links-common.profile. Placing the following links to elinks.profile resolves the situation: > > ``` > > ignore blacklist ${PATH}/lua* > > ignore blacklist /usr/include/lua* > > ignore blacklist /usr/lib/liblua* > > ignore blacklist /usr/lib/lua > > ignore blacklist /usr/lib64/liblua* > > ignore blacklist /usr/lib64/lua > > ignore blacklist /usr/share/lua* > > ``` > > `include allow-lua.inc` wink aw.. :smile:

gitea-mirror commented

2026-05-05 09:25:25 -06:00

Author

Owner

@ghost commented on GitHub (Nov 22, 2021):

@rusty-snake Should we add include allow-lua.inc to our elinks.profile?

@ghost commented on GitHub (Nov 22, 2021): @rusty-snake Should we add `include allow-lua.inc` to our elinks.profile?

gitea-mirror commented

2026-05-05 09:25:26 -06:00

Author

Owner

@kmk3 commented on GitHub (Dec 8, 2021):

@glitsj16 commented on Nov 22:

@rusty-snake Should we add include allow-lua.inc to our elinks.profile?

I don't see why not. Do you want to add it or do I add it?

@kmk3 commented on GitHub (Dec 8, 2021): @glitsj16 commented [on Nov 22](https://github.com/netblue30/firejail/issues/4707#issuecomment-975292101): > @rusty-snake Should we add `include allow-lua.inc` to our elinks.profile? I don't see why not. Do you want to add it or do I add it?

gitea-mirror commented

2026-05-05 09:25:27 -06:00

Author

Owner

@ghost commented on GitHub (Dec 8, 2021):

Do you want to add it or do I add it?

Feel free to add it :-)

@ghost commented on GitHub (Dec 8, 2021): > Do you want to add it or do I add it? Feel free to add it :-)

gitea-mirror referenced this issue

2026-05-05 10:21:33 -06:00

[PR #2759] [MERGED] Mention macros in profile.template #4515

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2759

No description provided.

Rows
Columns