mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #6191] lutris: gamescope is broken: /tmp/.X11-unix not owned by root or us (xwayland) #3214
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#3214
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @nutta-git on GitHub (Feb 4, 2024).
Original GitHub issue: https://github.com/netblue30/firejail/issues/6191
Description
Using gamescope within lutris crashes games on launch.
Steps to Reproduce
Steps to reproduce the behavior
Expected behavior
Games should run without crashing
Actual behavior
Games crash on launch
Behavior without a profile
Games run through gamescope as intended
Additional context
Environment
Checklist
/usr/bin/vlc) "fixes" it).https://github.com/netblue30/firejail/issues/1139)browser-allow-drm yes/browser-disable-u2f noinfirejail.configto allow DRM/U2F in browsers.--profile=PROFILENAMEto set the right profile. (Only relevant for AppImages)Log
Output of
LC_ALL=C firejail /path/to/programOutput of
LC_ALL=C firejail --debug /path/to/program6191-debuglutrisgamescopelog.txt
@rusty-snake commented on GitHub (Feb 4, 2024):
@nutta-git commented on GitHub (Feb 4, 2024):
@rusty-snake
that didn't work and its needed since it crashed the game before it could launch (without gamescope enabled)
@nutta-git commented on GitHub (Feb 4, 2024):
I was looking though journalctl and found a coredump for gamescope.
@kmk3 commented on GitHub (Feb 4, 2024):
Something not being owned by root is likely due to
noroot.Does it work with
ignore noroot?What is the output of the following?
@nutta-git commented on GitHub (Feb 4, 2024):
@kmk3 ignore root didn't work, but it gave new errors.
firejail --quiet --profile=lutris ls -al /tmp | grep X11
firejail --quiet --ignore=noroot --profile=lutris ls -al /tmp | grep X11
@kmk3 commented on GitHub (Feb 4, 2024):
Does it change anything if vulkan-tools is installed?
Are gnutls and lib32-gnutls installed?
Do you use
private-lib?I don't know if xwayland needs access to different paths.
What DE/WM do you use?
Does it work in an X11 session?
(By "Using gamescope within lutris" I assume that it's not just gamescope
directly).
Unfortunate that it does not print the pipe location in the "Broken pipe"
message.
Is there any related error in
dmesg?I don't see anything too obvious in the output; I'd suggest to try commenting
lutris.profile until it works.
Also, note that there have been a few changes to lutris.profile since 0.9.72.
Do the warnings change if you install firejail-git from the AUR?
@nutta-git commented on GitHub (Feb 5, 2024):
@kmk3 I had to restart my pc and it worked.
Thank you for taking your time and helping me out. @kmk3 @rusty-snake
ignore norootfixed this issue.EDIT: I restarted again and now doesn't work. this time the error code is
EDIT:
I think I figured it out, I had to
ignore private-tmpand now it seems to work. so its:ignore noroot&ignore private-tmp.I restarted multiple times to check this time :)
Steam can also uses gamescope (launch option), this might be applicable there as well (i haven't tested it).
@kmk3 commented on GitHub (Feb 11, 2024):
This seems like a bug in gamescope/xwayland.
I think that the real issue is that the ownership check above is faulty; it
does not take user namespaces into account, which is usually what causes a path
to appear to be owned by
nobody:nobodyto the sandboxed process.For example, when using
unshare:Also, such a directory may very well be owned by a system account.
I'd report this as a bug to the relevant project.
@nutta-git commented on GitHub (Feb 11, 2024):
Thanks, I will report this to gamescope.
@rusty-snake commented on GitHub (Feb 11, 2024):
FWIW:
6762626747/src/wayland/meta-xwayland.c (L513-573)@nutta-git commented on GitHub (Feb 15, 2024):
Issue reported to wlroots project. https://gitlab.freedesktop.org/wlroots/wlroots/-/issues/3805
@nutta-git commented on GitHub (Apr 12, 2024):
Update from Simon Ser
https://gitlab.freedesktop.org/wlroots/wlroots/-/issues/3805