Comments (24)
i'm testing :D
i gonna give you the result :P
from firejail-profiles.
Huhβ¦that's weird. What is mprotect?
from firejail-profiles.
it appears be a grsec feature
but i dont use grsec
Linux *** 4.9.9-1
from firejail-profiles.
pd kdenlive works with this weird settings
firejail --noprofile --net=none kdenlive
from firejail-profiles.
Right, so that just means that net none
isn't the problem.
from firejail-profiles.
Huh interesting...still works on my end. Which versions of kdenlive and firejail are you using?
from firejail-profiles.
kdenlive 16.12.2-1 (kde-applications kdemultimedia) [installed]
firejail version 0.9.44.8
from firejail-profiles.
Hmmm...okay, I have exactly the same versions and I'm not getting that error. Can you try commenting each line out one by one and see which one triggers the error?
from firejail-profiles.
Any updates on this? I'd love to fix the profile, but it's difficult if I can't replicate the issue.
from firejail-profiles.
i've troubles with kdenlive profile π
if you want i sent youmy last fail ;)
I'VE GAPPED ALL
but blender works without private-bin private-dev
and private-etc
from firejail-profiles.
cinelerra works (as march2017)
synfigstudio (as1.2.0 WORKS FINE)
Natron (2.2.5) works fine
i'm testing brackets (1.9)
from firejail-profiles.
So what you seem to be saying is that your setup is significantly different from mine π
Okay, let's keep these in different issues.
For kdenlive
(this thread), what you seem to be saying is that even when you comment out private-bin
private-dev
, private-etc,
shell none
, seccomp
, caps.drop all
, noroot
, nogroups
, and ipc-namespace
, you still can't get kdenlive
to start properly.
Two things:
- As you (perhaps) did not notice, you did not comment out the
private-tmp
part of this (which whitelists two things in/tmp
). Comment that out and see if that resolves the issue. - If that doesn't, then the issue is with the whitelists for the home directory or the blacklists on the system directories. Is your kdenlive installed in
/opt
by any chance?
For blender
, please open a new issue so that we can discuss it in its own thread.
from firejail-profiles.
i've commented these lines
but doesnt work
and my kdenlive its "normal" :D
from firejail-profiles.
So you say π
Okay, so you commented out all the private-*
things. This means that the whitelists are the problem. Can you try commenting out all the whitelist and blacklist options and seeing if it will start?
from firejail-profiles.
ok
from firejail-profiles.
i've commented ALL except
net none
and works
from firejail-profiles.
https://paste.teknik.io/Raw/bO0Lw
from firejail-profiles.
Okay now uncomment everything except for the blacklist and whitelist commands and see if it works (it should).
from firejail-profiles.
works too
even with blacklists enabled
from firejail-profiles.
Okay, so it's the whitelists. Good. That means that your kdenlive
needs access to some additional config files (or something) that mine does not. Can you uncomment only the ones referring to the home directory to see if it still starts?
from firejail-profiles.
@nyancat18 lemme know which whitelists you can uncomment and still have it work π
from firejail-profiles.
the home lines :)
we could give a harden dbus
and cut internet
from firejail-profiles.
I already cut internet to kdenlive, so that's not really an issue? I guess I can comment out the home lines for now with a note that they apparently break for some people π
from firejail-profiles.
thanks
home lines commented
and block internet (if the video its "poisoned" its fine) π‘οΈ
from firejail-profiles.
Related Issues (20)
- request: profile for youtube-dl HOT 2
- More profiles HOT 8
- cool profiles HOT 7
- torbrowser-launcher used in conjunction with firejail and apparmor
- TeamViewer profile HOT 2
- signal does not start HOT 2
- Steam does not show HOT 1
- Libreoffice can not open documents on removable media HOT 2
- [Request] Profile for gradio HOT 2
- Keepassxc does not start in firejail mode
- Can you explain how to sandbox process with systemd? HOT 4
- Adapting firefox.common to other programs HOT 3
- [discussion] discord.profile: Doesn't need access to the entirety of /tmp HOT 4
- Breakage introduced by modifications to common.inc
- Tvheadend profile
- biscuit profile HOT 2
- tmate
- Better Documentation
- add Asbru Connection Manager profile
- New Profile for LyX
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
π Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. πππ
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google β€οΈ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from firejail-profiles.