[GH-ISSUE #5068] Hugin profile requires shell and uname #2867

Closed
opened 2026-05-05 09:31:36 -06:00 by gitea-mirror · 1 comment
Owner

Originally created by @jose1711 on GitHub (Mar 23, 2022).
Original GitHub issue: https://github.com/netblue30/firejail/issues/5068

Description

Hugin's component called PTBatcherGUI requires access to shell and uname binary, otherwise this error is shown during stitching process (uname: error 12: Cannot allocate memory)

obrázok

Steps to Reproduce

  1. Run in bash LC_ALL=C firejail hugin
  2. Load any panorama images, align and create panorama...
  3. Receive the error during the last step (PTBatcherGUI is being executed)

Expected behavior

No error should be generated during the process.

Behavior without a profile

No error is shown when running without profile. Another way to get rid of it is make the following modification to the profile:

noblacklist ${PATH}/sh
noblacklist ${PATH}/bash
# add uname,sh to private-bin section

Note that on my system /usr/bin/sh points to bash.

Additional context

I don't think the actual panorama creation is affected, the error however should not really be there.

Environment

  • Arch Linux x86_64 rolling
  • Firejail version 0.9.69
  • firejail-git r8235.11af0293d-1

Checklist

  • The issues is caused by firejail (i.e. running the program by path (e.g. /usr/bin/vlc) "fixes" it).
  • [x I can reproduce the issue without custom modifications (e.g. globals.local).
  • The program has a profile. (If not, request one in https://github.com/netblue30/firejail/issues/1139)
  • The profile (and redirect profile if exists) hasn't already been fixed upstream.
  • I have performed a short search for similar issues (to avoid opening a duplicate).
    • I'm aware of browser-allow-drm yes/browser-disable-u2f no in firejail.config to allow DRM/U2F in browsers.
  • I used --profile=PROFILENAME to set the right profile. (Only relevant for AppImages)
Originally created by @jose1711 on GitHub (Mar 23, 2022). Original GitHub issue: https://github.com/netblue30/firejail/issues/5068 ### Description Hugin's component called PTBatcherGUI requires access to shell and uname binary, otherwise this error is shown during stitching process (`uname: error 12: Cannot allocate memory`) ![obrázok](https://user-images.githubusercontent.com/1406222/159810636-2b610b08-f6c0-451d-968d-1621e9b9c86c.png) ### Steps to Reproduce 1. Run in bash `LC_ALL=C firejail hugin` 2. Load any panorama images, align and create panorama... 3. Receive the error during the last step (`PTBatcherGUI` is being executed) ### Expected behavior No error should be generated during the process. ### Behavior without a profile No error is shown when running without profile. Another way to get rid of it is make the following modification to the profile: ``` noblacklist ${PATH}/sh noblacklist ${PATH}/bash # add uname,sh to private-bin section ``` Note that on my system `/usr/bin/sh` points to `bash`. ### Additional context I don't think the actual panorama creation is affected, the error however should not really be there. ### Environment - Arch Linux x86_64 rolling - Firejail version 0.9.69 - `firejail-git r8235.11af0293d-1` ### Checklist <!-- Note: Items are checked with an "x", like so: - [x] This is a checked item. --> - [x] The issues is caused by firejail (i.e. running the program by path (e.g. `/usr/bin/vlc`) "fixes" it). - [x I can reproduce the issue without custom modifications (e.g. globals.local). - [x] The program has a profile. (If not, request one in `https://github.com/netblue30/firejail/issues/1139`) - [x] The profile (and redirect profile if exists) hasn't already been fixed [upstream](https://github.com/netblue30/firejail/tree/master/etc). - [x] I have performed a short search for similar issues (to avoid opening a duplicate). - [ ] I'm aware of `browser-allow-drm yes`/`browser-disable-u2f no` in `firejail.config` to allow DRM/U2F in browsers. - [x] I used `--profile=PROFILENAME` to set the right profile. (Only relevant for AppImages)
Author
Owner

@rusty-snake commented on GitHub (Mar 24, 2022):

Open a PR with it ;)

include allow-bin-sh.inc
private-bin uname,sh
<!-- gh-comment-id:1077910899 --> @rusty-snake commented on GitHub (Mar 24, 2022): Open a PR with it ;) ``` include allow-bin-sh.inc private-bin uname,sh ```
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2867
No description provided.