mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #5281] audacity: error while loading shared libraries: lib-screen-geometry.so (AppArmor/private-bin) #2946
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#2946
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @a61kt on GitHub (Aug 1, 2022).
Original GitHub issue: https://github.com/netblue30/firejail/issues/5281
Description
Steps to Reproduce
open firejail audacity / see it
LC_ALL=C firejail PROGRAM(LC_ALL=Cto get a consistent output in English that can be understood by everybody)ERRORExpected behavior
get my audacity
Actual behavior
its broken
Behavior without a profile
$ firejail --noprofile --net=none audacity
Additional context
Any other detail that may help to understand/debug the problem
Environment
Checklist
/usr/bin/vlc) "fixes" it).https://github.com/netblue30/firejail/issues/1139)browser-allow-drm yes/browser-disable-u2f noinfirejail.configto allow DRM/U2F in browsers.--profile=PROFILENAMEto set the right profile. (Only relevant for AppImages)Log
Output of
LC_ALL=C firejail /path/to/programOutput of
LC_ALL=C firejail --debug /path/to/program@ghost commented on GitHub (Aug 1, 2022):
Odd that audacity complains about missing that file:
$ pkgfile lib-screen-geometry.so
community/audacity
I've installed https://archlinux.org/packages/community/x86_64/audacity/ on my arch linux box and with firejail from git it works. Only thing that changed in /etc/firejail/audacity.profile compared to 0.9.70 is the removal of
shell none. But even when I add that back audacity starts and works as expected for me. So I cannot reproduce this.UPDATE: other arch users i talked with on #archlinux IRC could reproduce this. For them audacity started to work by ignoring apparmor, so that's something you can try.
Do you use AppArmor? Can you post output from the below command here please?
$ firejail --ignore=quiet --ignore=apparmor /usr/bin/audacity@TopherIsSwell commented on GitHub (Aug 8, 2022):
Commenting out the
private-bin audacityline fixes this error for me on Fedora 36. Which is curious becauseprivate-binis supposed to only bind-mount the /bin, /usr/bin, /sbin, and /usr/sbin dirs, and on my install of Fed36, this library is chilling at/usr/lib64/audacity/lib-screen-geometry.soI don't know much about firejail profiles, but adding
noblacklist /usr/lib64/audacitydid not solve the problem for me.This error occurs on the Fedora 36 packaged version of firejail 0.9.66, and the version I compiled locally off of master (
316749ae4) -- labelled as 0.9.71.I'm adding a PR to adjust the profile, but I wonder why it's not reproduceable by some folks and why
private-binwould affect thelibdirectories. I'm just a drive by, so I'll let the maintainers decide whether this should be a investigated deeper in a separate issue, or if slapping a bandage on the audacity profile is good enough.@TopherIsSwell commented on GitHub (Aug 8, 2022):
I'm wondering if this has something to do with the distribution packaging of audacity. I heard there's drama about the upstream and some distro are doing some munging before packaging, maybe that's why some folks are having this issue and others aren't?
@TopherIsSwell commented on GitHub (Aug 8, 2022):
Okay, plot twist.
Removing
apparmorORprivate-bin(and leaving the other in place) fixes this issue for me on Fedora 36 (i.e. AppArmor is defs not installed).How does one create a cross-platform app profile? I'm presuming that Debian distros will want the apparmor integration, but it appears to not be playing nice with non-apparmor setups.
@ghost commented on GitHub (Aug 10, 2022):
Nice catch.
Firejail doesn't have cross-platform profiles. It's up to distro packagers to add/remove specifics in profiles. @reinerh Do you have any suggestions here?
IMO it would be sufficient to remove
apparmorfrom audacity. Can you edit your PR accordingly please?@TopherIsSwell commented on GitHub (Aug 10, 2022):
I present to you a shiny new commit for your reviewing pleasure.
@reinerh commented on GitHub (Aug 10, 2022):
Audacity works fine on Debian with apparmor enabled, but I'm fine with keeping it disabled if it crashes on other distros.
I don't think it's worth to ship a Debian-specific patch for this.
@ghost commented on GitHub (Aug 10, 2022):
Fixed in #5300 - closing.
@rusty-snake commented on GitHub (Aug 11, 2022):
Is AppArmor support enabled in your firejail build?