mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #5952] Harcoded /usr/lib profile entries do not apply to /usr/lib64 (Gentoo) #3140
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#3140
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @CaseOf on GitHub (Aug 12, 2023).
Original GitHub issue: https://github.com/netblue30/firejail/issues/5952
Description
I was looking at allowing ssh for vscodium then I did find the issue #5480 and reading allow-ssh.inc made me see some distributions specific lib directories matching counterparts in disable-common.inc.
I am running on Gentoo on a x86 64bit computer. On this configuration (and widely available hardware), lib directories are named
lib64on Gentoo.Then, it is actually not applied on such configuration.
Steps to Reproduce
Install and use a Gentoo distribution on an x86 64bit computer, look lib directories being called
lib64.Run firejail and watch lib directories not being affected by firejail rules.
Expected behavior
It would be nice that this Gentoo specific naming convention being covered by firejail.
Actual behavior
Gentoo specific naming convention on lib directories is not covered by firejail.
Behavior without a profile
Not applicable
Additional context
Any other detail that may help to understand/debug the problem
Environment
was compiled (
git rev-parse HEAD).Checklist
/usr/bin/vlc) "fixes" it).https://github.com/netblue30/firejail/issues/1139)browser-allow-drm yes/browser-disable-u2f noinfirejail.configto allow DRM/U2F in browsers.--profile=PROFILENAMEto set the right profile. (Only relevant for AppImages)Log
Output of
LC_ALL=C firejail /path/to/programOutput of
LC_ALL=C firejail --debug vscodiumRelates to:
@ghost commented on GitHub (Aug 12, 2023):
Thank you for reporting! I'm marking this as a bug. Can you open a PR to add the lib64 directories for Gentoo support?
@kmk3 commented on GitHub (Aug 12, 2023):
If I understand this correctly, every /usr/lib profile entry would also need a
/usr/lib64 entry?
In that case I think it would make more sense to add a
${LIB}macro andreplace the existing /usr/lib usage with it.
@CaseOf commented on GitHub (Aug 12, 2023):
That's it. This change makes sense to me to handle every distro path.