mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #6332] vlc: cannot read MakeMKV's libmmbd for BDs decryption #3242
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#3242
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @glu8716 on GitHub (May 7, 2024).
Original GitHub issue: https://github.com/netblue30/firejail/issues/6332
Description
MakeMKV provides libmmbd, which is a library for Blurays Discs decryption. It is installed in
/usr/lib/libmmbd.so.0. VLC should automatically read it and play the BD, but it doesn't if launched with Firejail.Steps to Reproduce
Expected behavior
The BD should play.
Actual behavior
The BD doesn't play.
Behavior without a profile
The BD plays.
Environment
Checklist
/usr/bin/vlc) "fixes" it).https://github.com/netblue30/firejail/issues/1139)browser-allow-drm yes/browser-disable-u2f noinfirejail.configto allow DRM/U2F in browsers.--profile=PROFILENAMEto set the right profile. (Only relevant for AppImages)Log
VLC launched with Firejail
VLC launched with
firejail --noprofile@ghost commented on GitHub (May 8, 2024):
Never actually used BDs, but VLC probably relies on libbluray to access those. And AFAICT that library needs a
javaruntime, which the profile blocks by includingdisable-devel.incand using a restrictiveprivate-bin.Have you tried allowing access to java(c) yet? I see you already use a vlc.local, so try adding the below to that:
PS: anything in your vlc.local that might be relevant to this?
@glu8716 commented on GitHub (May 8, 2024):
I tried to add the two lines but it still won't load the BD. In my .local file I only have the
net noneoption.@ghost commented on GitHub (May 8, 2024):
Well, that's unfortunate. It might need other stuff in private-bin. I assume you've already tried
ignore private-binto rule that in or out?Tracking down the culprit option(s) by commenting (=disabling) lines one by one (or in bulk for that matter) does take time, I do realize the pain in that. Yet, as this requires access to bluray hardware (which most if not all collaborators probably don't have) to actually test/reproduce/fix, its your best bet.
I'd start by confirming VLC can do this when sandboxed by running
firejail --profile=noprofile /usr/bin/vlc. If that doesn't work it would mean the BD functionality is impossible to sandbox with Firejail. If it does, the detective work can proceed :)@glu8716 commented on GitHub (May 15, 2024):
Yes, I have tried with
ignore private-bin, but it doesn't work. I'll try to disable different lines and see if I can find the culprit.