mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #553] bug with private-bin and /usr/local/bin #389
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#389
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @nick75e on GitHub (Jun 2, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/553
Hi!
With previous versions, when I wanted to sandbox gthumb with
private-bin, I would create a file in/usr/local/bin/to make it work system-wide but now with v0.9.40, it doesn't work any more.It says:
execvp: No such file or directoryI think it comes from the fact that firejail now also modifies
/usr/local/bin/whereas it was left untouched before. I can make firefox work because/usr/bin/firefoxis a symlink, I just have to point to the real file.@netblue30 commented on GitHub (Jun 2, 2016):
Yes, it is a bug. Adding /usr/local/bin to private-bil list is breaking firejail symbolic links in /usr/local/bin. I'll bring in a fix shortly, thank you for the bug.
@netblue30 commented on GitHub (Jun 3, 2016):
Fixed!
@nick75e commented on GitHub (Jun 3, 2016):
Thanks for the fast fix.
I tried to compile but the files are not in the same directories as with the .deb file.
How can I make the compiling process work like the .deb file?
@netblue30 commented on GitHub (Jun 4, 2016):
Do your git clone, go into firejail directory followed by "./configure --prefix=/usr", then do a "make deb". When is done, you have a new deb file in firejail directory.
@nick75e commented on GitHub (Jun 4, 2016):
The fix doesn't work, I still get
execvp: No such file or directory. :-(@netblue30 commented on GitHub (Jun 4, 2016):
Give me some more data. How are you starting it?
@nick75e commented on GitHub (Jun 4, 2016):
here's how to reproduce:
execvp: No such file or directoryNote1:
/usr/bin/gthumbis a binary not a symlink.Note2: It occurs with any program that isn't a symlink in $PATH
@netblue30 commented on GitHub (Jun 5, 2016):
It looks like I've fixed a different problem! Instead of "firejail /usr/bin/gthumb" put "firejail --debug /usr/bin/gthumb", run it from a terminal and put output here. Also, what do you have in the profile?
@nick75e commented on GitHub (Jun 5, 2016):
Here you are:
Output
gthumb.profile
block.inc
common_bin.inc
@netblue30 commented on GitHub (Jun 6, 2016):
Make /usr/local/bin/gthumb a symbolic link to /usr/bin/firejail instead of a bash script. --private-bin grabs only the first file in the path, so your script ends up starting itself.
You need the development version 0.9.41, it has the original fix for firejail symbolic links. Then, you remove the script and add the symlink instead:
@nick75e commented on GitHub (Jun 6, 2016):
Yes, it works! Thanks a lot!
Closing...