[GH-ISSUE #1492] Xonotic doesn't launch with firejail #998

Closed
opened 2026-05-05 07:17:04 -06:00 by gitea-mirror · 14 comments
Owner

Originally created by @pizzadude on GitHub (Aug 24, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1492

I run Ubuntu MATE 17.04 with the latest firejail built from git.

I have Xonotic installed from playdeb, but I had the same issue with the "regular" version from Xonotic's website.

If I do "locate xonotic" it resides in:
/usr/bin/xonotic
/usr/games/xonotic
/usr/lib/games/xonotic
/usr/share/games/xonotic

I tried adding "noblacklist /usr/share/games/xonotic" to the firejail profile but that didn't do anything.
I also tried adding "xonotic" to private-bin.

This is the output of "firejail xonotic"
`Reading profile /etc/firejail/xonotic.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Parent pid 32521, child pid 32522
Warning: skipping asound.conf for private /etc
Child process initialized in 200.18 ms

Parent is shutting down, bye...
`

And here's the output with the --debug flag.
http://paste.ubuntu.com/25380452/

I tried disabling seccomp for the xonotic profile, that did nothing.

Any ideas?

Originally created by @pizzadude on GitHub (Aug 24, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1492 I run Ubuntu MATE 17.04 with the latest firejail built from git. I have Xonotic installed from playdeb, but I had the same issue with the "regular" version from Xonotic's website. If I do "locate xonotic" it resides in: /usr/bin/xonotic /usr/games/xonotic /usr/lib/games/xonotic /usr/share/games/xonotic I tried adding "noblacklist /usr/share/games/xonotic" to the firejail profile but that didn't do anything. I also tried adding "xonotic" to private-bin. This is the output of "firejail xonotic" `Reading profile /etc/firejail/xonotic.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-passwdmgr.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-common.inc Parent pid 32521, child pid 32522 Warning: skipping asound.conf for private /etc Child process initialized in 200.18 ms Parent is shutting down, bye... ` And here's the output with the --debug flag. http://paste.ubuntu.com/25380452/ I tried disabling seccomp for the xonotic profile, that did nothing. Any ideas?
Author
Owner

@pizzadude commented on GitHub (Aug 24, 2017):

@SpotComms I tried what you suggested and it works.

<!-- gh-comment-id:324523557 --> @pizzadude commented on GitHub (Aug 24, 2017): @SpotComms I tried what you suggested and it works.
Author
Owner

@pizzadude commented on GitHub (Aug 24, 2017):

The culprit is private-bin.

<!-- gh-comment-id:324524197 --> @pizzadude commented on GitHub (Aug 24, 2017): The culprit is private-bin.
Author
Owner

@pizzadude commented on GitHub (Aug 24, 2017):

Nope.

<!-- gh-comment-id:324524768 --> @pizzadude commented on GitHub (Aug 24, 2017): Nope.
Author
Owner

@pizzadude commented on GitHub (Aug 24, 2017):

I also added darkplaces-glx and darkplaces-sdl to that and it didn't make a difference.

<!-- gh-comment-id:324524974 --> @pizzadude commented on GitHub (Aug 24, 2017): I also added darkplaces-glx and darkplaces-sdl to that and it didn't make a difference.
Author
Owner

@pizzadude commented on GitHub (Aug 24, 2017):

Yeah, I noticed you edited it, so I added the edited version, but it didn't make a difference.

<!-- gh-comment-id:324525880 --> @pizzadude commented on GitHub (Aug 24, 2017): Yeah, I noticed you edited it, so I added the edited version, but it didn't make a difference.
Author
Owner

@pizzadude commented on GitHub (Aug 24, 2017):

Hmmm, for some weird reason /usr/bin/xonotic doesn't exist. It showed up in a "whereis" though.

This is /usr/games/xonotic:

#!/bin/sh
cd /usr/share/games/xonotic
./xonotic-linux-glx.sh $@ -xonotic

And this is xonotic-linux-glx.sh

https://gist.github.com/pizzadude/20f9f873c0a685a1a4bab15a862d5268

<!-- gh-comment-id:324526230 --> @pizzadude commented on GitHub (Aug 24, 2017): Hmmm, for some weird reason /usr/bin/xonotic doesn't exist. It showed up in a "whereis" though. This is /usr/games/xonotic: #!/bin/sh cd /usr/share/games/xonotic ./xonotic-linux-glx.sh $@ -xonotic And this is xonotic-linux-glx.sh https://gist.github.com/pizzadude/20f9f873c0a685a1a4bab15a862d5268
Author
Owner

@pizzadude commented on GitHub (Aug 24, 2017):

No dice.

<!-- gh-comment-id:324526537 --> @pizzadude commented on GitHub (Aug 24, 2017): No dice.
Author
Owner

@pizzadude commented on GitHub (Aug 24, 2017):

It might be because of the contents on xonotic-linux-glx.sh

<!-- gh-comment-id:324526726 --> @pizzadude commented on GitHub (Aug 24, 2017): It might be because of the contents on xonotic-linux-glx.sh
Author
Owner

@pizzadude commented on GitHub (Aug 24, 2017):

It works now but there's no audio.

<!-- gh-comment-id:324530756 --> @pizzadude commented on GitHub (Aug 24, 2017): It works now but there's no audio.
Author
Owner

@pizzadude commented on GitHub (Aug 24, 2017):

Yes.

<!-- gh-comment-id:324531157 --> @pizzadude commented on GitHub (Aug 24, 2017): Yes.
Author
Owner

@SkewedZeppelin commented on GitHub (Aug 24, 2017):

Append ,group,passwd to private-etc

<!-- gh-comment-id:324532032 --> @SkewedZeppelin commented on GitHub (Aug 24, 2017): Append `,group,passwd` to private-etc
Author
Owner

@pizzadude commented on GitHub (Aug 24, 2017):

That doesn't solve it.

Also, thanks for putting up with this issue for so long 👍

<!-- gh-comment-id:324532758 --> @pizzadude commented on GitHub (Aug 24, 2017): That doesn't solve it. Also, thanks for putting up with this issue for so long 👍
Author
Owner

@netblue30 commented on GitHub (Aug 25, 2017):

Thanks @SpotComms, all merged.

<!-- gh-comment-id:324893253 --> @netblue30 commented on GitHub (Aug 25, 2017): Thanks @SpotComms, all merged.
Author
Owner

@SkewedZeppelin commented on GitHub (Aug 25, 2017):

@netblue30 audio is still partially broken on some systems, we might just need to comment private-etc

<!-- gh-comment-id:324997010 --> @SkewedZeppelin commented on GitHub (Aug 25, 2017): @netblue30 audio is still partially broken on some systems, we might just need to comment private-etc
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#998
No description provided.