Asahi Linux

341 readers

8 users here now

Unofficial community for the Asahi Linux project

founded 3 years ago

MODERATORS

sdu@lemmy.world

How do I allow muvm/FEX in Firejail? (lemmy.dbzer0.com)

submitted 2 days ago by thethunderwolf@lemmy.dbzer0.com to c/asahilinux@lemmy.world

4 comments fedilink hide all child comments

output of firejail ./start.sh:

Reading profile /etc/firejail/default.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/landlock-common.inc

** Note: you can use --noprofile to disable default.profile **

firejail version 0.9.80

Parent pid 63759, child pid 63760
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Base filesystem installed in 22.11 ms
Child process initialized in 56.25 ms
Running Undertale
[binfmt_dispatcher] Using FEX with muvm
Error: Failed to create lock file

Caused by:
    Permission denied (os error 13)

Parent is shutting down, bye...

./start.sh is a shell script that launches the executable, its running the script (hence the "Running Undertale") but the executable (which is x86_64) cannot be run because Firejail restrictions block the muvm/FEX lock file

how do i configure firejail to allow muvm/FEX to launch

you are viewing a single comment's thread
view the rest of the comments

[–] onipa@feddit.org 1 points 1 day ago

one step closer:

$ firejail --noblacklist=/run/user/$(id -u)/muvm.lock muvm FEXBash
Reading profile /etc/firejail/default.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/landlock-common.inc

** Note: you can use --noprofile to disable default.profile **

firejail version 0.9.80

Parent pid 14335, child pid 14336
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Base filesystem installed in 23.73 ms
Child process initialized in 91.82 ms
Error: Failed to prepare environment variables

Caused by:
    0: Failed to read `/proc/device-tree/compatible`
    1: Permission denied (os error 13)

Parent is shutting down, bye...
$ firejail --noprofile muvm FEXBash
firejail version 0.9.80

Parent pid 14351, child pid 14352
Base filesystem installed in 0.02 ms
Child process initialized in 6.42 ms
Error: Failed to prepare environment variables

Caused by:
    0: Failed to read `/proc/device-tree/compatible`
    1: Permission denied (os error 13)

Parent is shutting down, bye...

But I don't know why it can't read /proc/device-tree/compatible even though I don't use a profile ...