mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #739] Invalid whitelist path #499
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#499
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @DDoubleU on GitHub (Aug 21, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/739
Hi,
I want to use Firejail for Spotify as well, but had to change the profile because I added some local files to it. These are located on an NTFS volume mounted to /mnt/Data.
After updating the profile I resulted in the following error:
$ firejail spotifyReading profile /etc/firejail/spotify.profileReading profile /etc/firejail/disable-common.incReading profile /etc/firejail/disable-programs.incReading profile /etc/firejail/disable-devel.incReading profile /etc/firejail/disable-passwdmgr.incReading profile /etc/firejail/whitelist-common.incWarning: user namespaces not available in the current kernel.Parent pid 1257, child pid 1258Error: invalid whitelist path /mnt/Data/Spotify-localError: cannot establish communication with the parent, exiting...The only thing I changed was this:
whitelist ${HOME}/.config/spotifywhitelist ${HOME}/.local/share/spotifywhitelist ${HOME}/.cache/spotifywhitelist** /mnt/Data/Spotify-localDo you have any idea what might be the cause of this?
Thanks in advance!
@Fred-Barclay commented on GitHub (Aug 21, 2016):
Hey mate! Could you post your entire spotify profile? I think I see what the problem is but I want to make sure. :)
Also, what version of firejail are you using?
firejail --versionif you're not sure.@netblue30 commented on GitHub (Aug 22, 2016):
It could be because of NTFS, I'll have to give it a try.
@DDoubleU commented on GitHub (Aug 22, 2016):
My apologies, I was a bit brief in my opening post. The entire spotify.profile file looks as following:
# Spotify media player profilenoblacklist ${HOME}/.config/spotifynoblacklist ${HOME}/.cache/spotifynoblacklist ${HOME}/.local/share/spotifyinclude /etc/firejail/disable-common.incinclude /etc/firejail/disable-programs.incinclude /etc/firejail/disable-devel.incinclude /etc/firejail/disable-passwdmgr.inc# Whitelist the folders needed by Spotify - This is more restrictive# than a blacklist though, but this is all spotify requires for# streaming audiomkdir ${HOME}/.configmkdir ${HOME}/.config/spotifywhitelist ${HOME}/.config/spotifymkdir ${HOME}/.localmkdir ${HOME}/.local/sharemkdir ${HOME}/.local/share/spotifywhitelist ${HOME}/.local/share/spotifymkdir ${HOME}/.cachemkdir ${HOME}/.cache/spotifywhitelist ${HOME}/.cache/spotifywhitelist /mnt/Data/Spotify-localinclude /etc/firejail/whitelist-common.inccaps.drop allseccompprotocol unix,inet,inet6,netlinknetfilternonewprivsnorootThe version of Firejail I'm using is 0.9.40.
I mount the NTFS volume using NTFS-3g (version 2016.2.22).
@netblue30 commented on GitHub (Sep 6, 2016):
The problem is /mnt is not yet supported for whitelisting. I was afraid it had something to do with NTFS. I added an entry on my todo list to bring in support for whitelisting /mnt.