github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #7096] Add a profile for Heroic Games Launcher #3486

New issue

Closed

opened 2026-05-05 10:01:40 -06:00 by gitea-mirror · 1 comment

gitea-mirror commented

2026-05-05 10:01:40 -06:00

Owner

Originally created by @voiduser123321 on GitHub (Mar 8, 2026).
Original GitHub issue: https://github.com/netblue30/firejail/issues/7096

Description

When running the program with --build --appimage combo, Heroic Games Launcher window only shows blank screen. After saving the resulting profile and commenting out almost every restriction (attached custon profile for reference below), run the launcher with options --profile=heroic --appimage, and the launcher appears to work as intended at first, but installed games silently fail to launch.

Steps to Reproduce

Save the attached profile in ~/.config/firejail/heroic.profile
Install Heroic Games Launcher AppImage to /usr/local/bin/heroic
Run in bash LC_ALL=C firejail --profile=heroic --appimage /usr/local/bin/heroic
Install and launch any game
Game silently fails to launch

Expected behavior

I expect both Heroic Games Launcher and installed games to launch properly.

Actual behavior

Instead the games silently fail to launch.

Behavior without a profile

When run with a --noprofile option, "Against the Storm" fails to launch with the following error:
Failed to initialize graphics. Make sure you have DirectX 11 installed, have up to date drivers for your graphics card and have not disabled 3D acceleration in display settings. InitializeEngineGraphics failed

Other games appear to run without problems.

Additional context

Attaching my custom profile for reference below:

include /usr/local/bin/heroic
include globals.local

noblacklist ${HOME}/.config/Epic
noblacklist ${HOME}/.config/MangoHud
noblacklist ${HOME}/.local/share/Steam
noblacklist ${HOME}/.local/share/vulkan
noblacklist ${HOME}/.steam
noblacklist ${HOME}/.steampath
noblacklist ${HOME}/.steampid
noblacklist /sbin
noblacklist /usr/sbin

include allow-java.inc

include allow-python2.inc
include allow-python3.inc
whitelist ${HOME}/.cache/nvidia
whitelist ${HOME}/.config/Epic
whitelist ${HOME}/.config/MangoHud
whitelist ${HOME}/.config/heroic
whitelist ${HOME}/.config/legendary
whitelist ${HOME}/.config/vulkan
whitelist ${HOME}/.config/vulkan/loader_settings.d
whitelist ${HOME}/.local/share/Steam
whitelist ${HOME}/.local/share/lutris/runners/wine
whitelist ${HOME}/.local/share/applnk
whitelist ${HOME}/.local/share/vulkan
whitelist ${HOME}/.local/share/vulkan/implicit_layer.d
whitelist ${HOME}/.local/share/vulkan/loader_settings.d
whitelist ${HOME}/.local/state/Heroic
whitelist ${HOME}/.nv
whitelist ${HOME}/.steam/steam/steamapps
whitelist ${HOME}/.steam
whitelist ${HOME}/.steampath
whitelist ${HOME}/.steampid
whitelist ${HOME}/.var/app/com.valvesoftware.Steam/.steam
whitelist ${HOME}/Documents
whitelist ${HOME}/Games

whitelist /run/modprobe.d
whitelist /run/udev/control
include whitelist-run-common.inc
include whitelist-runuser-common.inc
include whitelist-var-common.inc

nonewprivs
noroot
protocol unix,inet,inet6,netlink,

Environment

Name/version/arch of the Linux kernel (Linux 6.12.76_1 x86_64):
Name/version of the Linux distribution (Void Linux):
Name/version of the relevant program(s)/package(s) (Heroic-2.20.1-linux-x86_64.AppImage):
Version of Firejail (firejail version 0.9.79):

Checklist

I am using firejail 0.9.78 or later
I am using the full program path (e.g. firejail /usr/bin/vlc instead of firejail vlc; see https://github.com/netblue30/firejail/issues/2877)
The issues is caused by firejail (i.e. running the program by path (e.g. /usr/bin/vlc) "fixes" it).
I can reproduce the issue without custom modifications (e.g. globals.local).
The program has a profile. (If not, request one in https://github.com/netblue30/firejail/issues/1139)
The profile (and redirect profile if exists) hasn't already been fixed upstream.
I have performed a short search for similar issues (to avoid opening a duplicate).
- I'm aware of browser-allow-drm yes/browser-disable-u2f no in firejail.config to allow DRM/U2F in browsers.
I used --profile=PROFILENAME to set the right profile. (Only relevant for AppImages)

Originally created by @voiduser123321 on GitHub (Mar 8, 2026). Original GitHub issue: https://github.com/netblue30/firejail/issues/7096  ### Description When running the program with --build --appimage combo, Heroic Games Launcher window only shows blank screen. After saving the resulting profile and commenting out almost every restriction (attached custon profile for reference below), run the launcher with options --profile=heroic --appimage, and the launcher appears to work as intended at first, but installed games silently fail to launch. ### Steps to Reproduce 1. Save the attached profile in ~/.config/firejail/heroic.profile 2. Install Heroic Games Launcher AppImage to /usr/local/bin/heroic 3. Run in bash `LC_ALL=C firejail --profile=heroic --appimage /usr/local/bin/heroic` 4. Install and launch any game 5. Game silently fails to launch ### Expected behavior I expect both Heroic Games Launcher and installed games to launch properly. ### Actual behavior Instead the games silently fail to launch. ### Behavior without a profile When run with a --noprofile option, "Against the Storm" fails to launch with the following error: `Failed to initialize graphics. Make sure you have DirectX 11 installed, have up to date drivers for your graphics card and have not disabled 3D acceleration in display settings. InitializeEngineGraphics failed` Other games appear to run without problems. ### Additional context Attaching my custom profile for reference below: include /usr/local/bin/heroic include globals.local noblacklist ${HOME}/.config/Epic noblacklist ${HOME}/.config/MangoHud noblacklist ${HOME}/.local/share/Steam noblacklist ${HOME}/.local/share/vulkan noblacklist ${HOME}/.steam noblacklist ${HOME}/.steampath noblacklist ${HOME}/.steampid noblacklist /sbin noblacklist /usr/sbin include allow-java.inc include allow-python2.inc include allow-python3.inc whitelist ${HOME}/.cache/nvidia whitelist ${HOME}/.config/Epic whitelist ${HOME}/.config/MangoHud whitelist ${HOME}/.config/heroic whitelist ${HOME}/.config/legendary whitelist ${HOME}/.config/vulkan whitelist ${HOME}/.config/vulkan/loader_settings.d whitelist ${HOME}/.local/share/Steam whitelist ${HOME}/.local/share/lutris/runners/wine whitelist ${HOME}/.local/share/applnk whitelist ${HOME}/.local/share/vulkan whitelist ${HOME}/.local/share/vulkan/implicit_layer.d whitelist ${HOME}/.local/share/vulkan/loader_settings.d whitelist ${HOME}/.local/state/Heroic whitelist ${HOME}/.nv whitelist ${HOME}/.steam/steam/steamapps whitelist ${HOME}/.steam whitelist ${HOME}/.steampath whitelist ${HOME}/.steampid whitelist ${HOME}/.var/app/com.valvesoftware.Steam/.steam whitelist ${HOME}/Documents whitelist ${HOME}/Games whitelist /run/modprobe.d whitelist /run/udev/control include whitelist-run-common.inc include whitelist-runuser-common.inc include whitelist-var-common.inc nonewprivs noroot protocol unix,inet,inet6,netlink, ### Environment - Name/version/arch of the Linux kernel (`Linux 6.12.76_1 x86_64`): - Name/version of the Linux distribution (`Void Linux`): - Name/version of the relevant program(s)/package(s) (`Heroic-2.20.1-linux-x86_64.AppImage`): - Version of Firejail (`firejail version 0.9.79`): ### Checklist  - [x] I am using firejail [0.9.78 or later](https://github.com/netblue30/firejail/tree/master/SECURITY.md) - [x] I am using the full program path (e.g. `firejail /usr/bin/vlc` instead of `firejail vlc`; see `https://github.com/netblue30/firejail/issues/2877`) - [x] The issues is caused by firejail (i.e. running the program by path (e.g. `/usr/bin/vlc`) "fixes" it). - [ ] I can reproduce the issue without custom modifications (e.g. globals.local). - [ ] The program has a profile. (If not, request one in `https://github.com/netblue30/firejail/issues/1139`) - [ ] The profile (and redirect profile if exists) hasn't already been fixed [upstream](https://github.com/netblue30/firejail/tree/master/etc). - [x] I have performed a short search for similar issues (to avoid opening a duplicate). - [x] I'm aware of `browser-allow-drm yes`/`browser-disable-u2f no` in `firejail.config` to allow DRM/U2F in browsers. - [x] I used `--profile=PROFILENAME` to set the right profile. (Only relevant for AppImages)

gitea-mirror

2026-05-05 10:01:40 -06:00

closed this issue
added the
profile-request
label

gitea-mirror commented

2026-05-05 10:01:43 -06:00

Author

Owner

@kmk3 commented on GitHub (Mar 10, 2026):

For debugging, you can try to comment lines until it works and then adapt the
profile.

If it does not work even with --noprofile or --profile=noprofile, then the
program is not supported and you'd likely need to dive into the code to figure
out why.

@kmk3 commented on GitHub (Mar 10, 2026): For debugging, you can try to comment lines until it works and then adapt the profile. If it does not work even with `--noprofile` or `--profile=noprofile`, then the program is not supported and you'd likely need to dive into the code to figure out why.

gitea-mirror referenced this issue

2026-05-05 10:26:21 -06:00

[PR #3486] [MERGED] fixes for /var/mail in mail clients #4775

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3486

No description provided.

Rows
Columns