github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #4775] Highlight profile blacklists lua which is required #2773

New issue

Closed

opened 2026-05-05 09:26:13 -06:00 by gitea-mirror · 3 comments

gitea-mirror commented

2026-05-05 09:26:13 -06:00

Owner

Originally created by @michelesr on GitHub (Dec 13, 2021).
Original GitHub issue: https://github.com/netblue30/firejail/issues/4775

Description

Highlight text formatter program fails to run due to lua libraries being blacklisted.

Steps to Reproduce

Steps to reproduce the behavior

Run in bash firejail highlight

Expected behavior

The program runs

Actual behavior

The program fails with the following error:

/usr/bin/highlight: error while loading shared libraries: liblua.so.5.4: cannot open shared object file: Permission denied

Behavior without a profile

What changed calling LC_ALL=C firejail --noprofile /path/to/program in a terminal?

The program works normally.

Environment

Arch Linux
Firejail version 0.9.66

Checklist

The issues is caused by firejail (i.e. running the program by path (e.g. /usr/bin/vlc) "fixes" it).
I can reproduce the issue without custom modifications (e.g. globals.local).
The program has a profile. (If not, request one in https://github.com/netblue30/firejail/issues/1139)
The profile (and redirect profile if exists) hasn't already been fixed upstream.
I have performed a short search for similar issues (to avoid opening a duplicate).

Originally created by @michelesr on GitHub (Dec 13, 2021). Original GitHub issue: https://github.com/netblue30/firejail/issues/4775  ### Description Highlight text formatter program fails to run due to lua libraries being [blacklisted](https://github.com/netblue30/firejail/blob/master/etc/inc/disable-interpreters.inc#L13). ### Steps to Reproduce _Steps to reproduce the behavior_ 1. Run in bash `firejail highlight` ### Expected behavior The program runs ### Actual behavior The program fails with the following error: ``` /usr/bin/highlight: error while loading shared libraries: liblua.so.5.4: cannot open shared object file: Permission denied ``` ### Behavior without a profile _What changed calling `LC_ALL=C firejail --noprofile /path/to/program` in a terminal?_ The program works normally. ### Environment - Arch Linux - Firejail version 0.9.66 ### Checklist  - [x] The issues is caused by firejail (i.e. running the program by path (e.g. `/usr/bin/vlc`) "fixes" it). - [x] I can reproduce the issue without custom modifications (e.g. globals.local). - [x] The program has a profile. (If not, request one in `https://github.com/netblue30/firejail/issues/1139`) - [x] The profile (and redirect profile if exists) hasn't already been fixed [upstream](https://github.com/netblue30/firejail/tree/master/etc). - [x] I have performed a short search for similar issues (to avoid opening a duplicate).

gitea-mirror closed this issue

2026-05-05 09:26:14 -06:00

gitea-mirror commented

2026-05-05 09:26:15 -06:00

Author

Owner

@ghost commented on GitHub (Dec 13, 2021):

@michelesr Can you confirm the app works when adding the below to your highlight.local:

# Allow lua (blacklisted by disable-interpreters.inc)
include allow-lua.inc

@ghost commented on GitHub (Dec 13, 2021): @michelesr Can you confirm the app works when adding the below to your highlight.local: ``` # Allow lua (blacklisted by disable-interpreters.inc) include allow-lua.inc ```

gitea-mirror commented

2026-05-05 09:26:17 -06:00

Author

Owner

@michelesr commented on GitHub (Dec 13, 2021):

Can you confirm the app works when adding the below to your highlight.local:

Yes, it works.

@michelesr commented on GitHub (Dec 13, 2021): > Can you confirm the app works when adding the below to your highlight.local: Yes, it works.

gitea-mirror commented

2026-05-05 09:26:18 -06:00

Author

Owner

@ghost commented on GitHub (Dec 13, 2021):

@michelesr Thanks for reporting this and confirming the fix! I'll add a PR to get this ready for the next milestone.

@ghost commented on GitHub (Dec 13, 2021): @michelesr Thanks for reporting this and confirming the fix! I'll add a PR to get this ready for the next milestone.

gitea-mirror referenced this issue

2026-05-05 10:21:38 -06:00

[PR #2773] [MERGED] Refactoring as whitelist profile #4521

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2773

No description provided.

Rows
Columns