github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #1292] Provided clementine profile causes library scanning to fail #880

New issue

Closed

opened 2026-05-05 07:02:13 -06:00 by gitea-mirror · 3 comments

gitea-mirror commented

2026-05-05 07:02:13 -06:00

Owner

Originally created by @Kishore96in on GitHub (May 21, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1292

The currently included profile for clementine has the following option

seccomp

The inclusion of this option causes clementine to fail while attempting to scan a music library (scanning is stuck at 0%). Removal of this line allows clementine to scan folders successfully.

Originally created by @Kishore96in on GitHub (May 21, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1292 The currently included profile for clementine has the following option ``` seccomp ``` The inclusion of this option causes clementine to fail while attempting to scan a music library (scanning is stuck at 0%). Removal of this line allows clementine to scan folders successfully.

gitea-mirror closed this issue

2026-05-05 07:02:15 -06:00

gitea-mirror commented

2026-05-05 07:02:18 -06:00

Author

Owner

@SYN-cook commented on GitHub (May 22, 2017):

If I am not mistaken it is ioprio_set which causes the trouble. Can you try replacing seccomp with the following long line:

seccomp.drop mount,umount2,ptrace,kexec_load,kexec_file_load,name_to_handle_at,open_by_handle_at,create_module,init_module,finit_module,delete_module,iopl,ioperm,swapon,swapoff,syslog,process_vm_readv,process_vm_writev,sysfs,_sysctl,adjtimex,clock_adjtime,lookup_dcookie,perf_event_open,fanotify_init,kcmp,add_key,request_key,keyctl,uselib,acct,modify_ldt,pivot_root,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,mbind,get_mempolicy,set_mempolicy,migrate_pages,move_pages,vmsplice,chroot,tuxcall,reboot,mfsservctl,get_kernel_syms,bpf,clock_settime,personality,process_vm_writev,query_module,settimeofday,stime,umount,userfaultfd,ustat,vm86,vm86old

@SYN-cook commented on GitHub (May 22, 2017): If I am not mistaken it is ioprio_set which causes the trouble. Can you try replacing `seccomp` with the following long line: `seccomp.drop mount,umount2,ptrace,kexec_load,kexec_file_load,name_to_handle_at,open_by_handle_at,create_module,init_module,finit_module,delete_module,iopl,ioperm,swapon,swapoff,syslog,process_vm_readv,process_vm_writev,sysfs,_sysctl,adjtimex,clock_adjtime,lookup_dcookie,perf_event_open,fanotify_init,kcmp,add_key,request_key,keyctl,uselib,acct,modify_ldt,pivot_root,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,mbind,get_mempolicy,set_mempolicy,migrate_pages,move_pages,vmsplice,chroot,tuxcall,reboot,mfsservctl,get_kernel_syms,bpf,clock_settime,personality,process_vm_writev,query_module,settimeofday,stime,umount,userfaultfd,ustat,vm86,vm86old`

gitea-mirror commented

2026-05-05 07:02:20 -06:00

Author

Owner

@Kishore96in commented on GitHub (May 22, 2017):

Can confirm that the above replacement works.

@Kishore96in commented on GitHub (May 22, 2017): Can confirm that the above replacement works.

gitea-mirror commented

2026-05-05 07:02:22 -06:00

Author

Owner

@Fred-Barclay commented on GitHub (May 22, 2017):

Thanks for the report @Kishore96in and for the fix @SYN-cook. It's all merged in now.

@Fred-Barclay commented on GitHub (May 22, 2017): Thanks for the report @Kishore96in and for the fix @SYN-cook. It's all merged in now.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#880

No description provided.

Rows
Columns