kdenlive doesnt work about firejail-profiles HOT 24 CLOSED

i'm testing :D

i gonna give you the result :P

from firejail-profiles.

Huh…that's weird. What is mprotect?

from firejail-profiles.

it appears be a grsec feature
but i dont use grsec
Linux *** 4.9.9-1

from firejail-profiles.

pd kdenlive works with this weird settings

firejail --noprofile --net=none kdenlive

from firejail-profiles.

Right, so that just means that net none isn't the problem.

from firejail-profiles.

Huh interesting...still works on my end. Which versions of kdenlive and firejail are you using?

from firejail-profiles.

kdenlive 16.12.2-1 (kde-applications kdemultimedia) [installed]
firejail version 0.9.44.8

from firejail-profiles.

Hmmm...okay, I have exactly the same versions and I'm not getting that error. Can you try commenting each line out one by one and see which one triggers the error?

from firejail-profiles.

Any updates on this? I'd love to fix the profile, but it's difficult if I can't replicate the issue.

from firejail-profiles.

i've troubles with kdenlive profile 😠

if you want i sent youmy last fail ;)
I'VE GAPPED ALL
but blender works without private-bin private-dev
and private-etc

from firejail-profiles.

cinelerra works (as march2017)
synfigstudio (as1.2.0 WORKS FINE)
Natron (2.2.5) works fine

i'm testing brackets (1.9)

from firejail-profiles.

So what you seem to be saying is that your setup is significantly different from mine 😉
Okay, let's keep these in different issues.
For kdenlive (this thread), what you seem to be saying is that even when you comment out private-bin private-dev, private-etc, shell none, seccomp, caps.drop all, noroot, nogroups, and ipc-namespace, you still can't get kdenlive to start properly.
Two things:

• As you (perhaps) did not notice, you did not comment out the private-tmp part of this (which whitelists two things in /tmp). Comment that out and see if that resolves the issue.
• If that doesn't, then the issue is with the whitelists for the home directory or the blacklists on the system directories. Is your kdenlive installed in /opt by any chance?

For blender, please open a new issue so that we can discuss it in its own thread.

from firejail-profiles.

i've commented these lines
but doesnt work

and my kdenlive its "normal" :D

from firejail-profiles.

So you say 😉
Okay, so you commented out all the private-* things. This means that the whitelists are the problem. Can you try commenting out all the whitelist and blacklist options and seeing if it will start?

from firejail-profiles.

ok

from firejail-profiles.

i've commented ALL except
net none

and works

from firejail-profiles.

https://paste.teknik.io/Raw/bO0Lw

from firejail-profiles.

Okay now uncomment everything except for the blacklist and whitelist commands and see if it works (it should).

from firejail-profiles.

works too
even with blacklists enabled

from firejail-profiles.

Okay, so it's the whitelists. Good. That means that your kdenlive needs access to some additional config files (or something) that mine does not. Can you uncomment only the ones referring to the home directory to see if it still starts?

from firejail-profiles.

@nyancat18 lemme know which whitelists you can uncomment and still have it work 😄

from firejail-profiles.

the home lines :)

we could give a harden dbus

and cut internet

from firejail-profiles.

I already cut internet to kdenlive, so that's not really an issue? I guess I can comment out the home lines for now with a note that they apparently break for some people 😄

from firejail-profiles.

thanks

home lines commented

and block internet (if the video its "poisoned" its fine) 🗡️

from firejail-profiles.