aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar powerjungle <fabsidereal@gmail.com>2024-02-19 18:04:14 +0100
committerLibravatar powerjungle <fabsidereal@gmail.com>2024-02-19 18:21:11 +0100
commit1a2e8ab852dce3dcfa3ad39dc009613ce6ffe53f (patch)
tree68d0040289099a0b875b98daaf6edf257a4e193b /etc
parentbuild(deps): bump github/codeql-action from 3.24.0 to 3.24.3 (diff)
downloadfirejail-1a2e8ab852dce3dcfa3ad39dc009613ce6ffe53f.tar.gz
firejail-1a2e8ab852dce3dcfa3ad39dc009613ce6ffe53f.tar.zst
firejail-1a2e8ab852dce3dcfa3ad39dc009613ce6ffe53f.zip
multimc: instances not running, because of missing permissions
When starting an instance, in the logs, a failed attempt to load the lwjgl library is shown and the game doesn't run. The library is in the /tmp directory. The reason for this appears to be, in the lwjgl source code, the shared library loading function, extracts in the temporary directory and continues from there. This is fixed by whitelisting. The reason for adding "ignore noexec /tmp" as well, is that without it, the game can't run, even if the directory is whitelisted. It seems the library needs to be loaded from /tmp. A second error for a failed attempt to access /home/user/.cache/JNA is also shown in the logs. This is also fixed by whitelisting.
Diffstat (limited to 'etc')
-rw-r--r--etc/profile-m-z/multimc5.profile11
1 files changed, 11 insertions, 0 deletions
diff --git a/etc/profile-m-z/multimc5.profile b/etc/profile-m-z/multimc5.profile
index 41f82bd07..734d9c11f 100644
--- a/etc/profile-m-z/multimc5.profile
+++ b/etc/profile-m-z/multimc5.profile
@@ -8,11 +8,16 @@ include globals.local
8noblacklist ${HOME}/.local/share/multimc 8noblacklist ${HOME}/.local/share/multimc
9noblacklist ${HOME}/.local/share/multimc5 9noblacklist ${HOME}/.local/share/multimc5
10noblacklist ${HOME}/.multimc5 10noblacklist ${HOME}/.multimc5
11noblacklist ${HOME}/.cache/JNA
12noblacklist /tmp/lwjgl_*
11 13
12# Ignore noexec on ${HOME} as MultiMC installs LWJGL native 14# Ignore noexec on ${HOME} as MultiMC installs LWJGL native
13# libraries in ${HOME}/.local/share/multimc 15# libraries in ${HOME}/.local/share/multimc
14ignore noexec ${HOME} 16ignore noexec ${HOME}
15 17
18# Ignore noexec on /tmp as LWJGL extracts libraries to /tmp
19ignore noexec /tmp
20
16# Allow java (blacklisted by disable-devel.inc) 21# Allow java (blacklisted by disable-devel.inc)
17include allow-java.inc 22include allow-java.inc
18 23
@@ -25,9 +30,12 @@ include disable-programs.inc
25mkdir ${HOME}/.local/share/multimc 30mkdir ${HOME}/.local/share/multimc
26mkdir ${HOME}/.local/share/multimc5 31mkdir ${HOME}/.local/share/multimc5
27mkdir ${HOME}/.multimc5 32mkdir ${HOME}/.multimc5
33mkdir ${HOME}/.cache/JNA
28whitelist ${HOME}/.local/share/multimc 34whitelist ${HOME}/.local/share/multimc
29whitelist ${HOME}/.local/share/multimc5 35whitelist ${HOME}/.local/share/multimc5
30whitelist ${HOME}/.multimc5 36whitelist ${HOME}/.multimc5
37whitelist ${HOME}/.cache/JNA
38whitelist /tmp/lwjgl_*
31include whitelist-common.inc 39include whitelist-common.inc
32 40
33caps.drop all 41caps.drop all
@@ -49,4 +57,7 @@ disable-mnt
49private-dev 57private-dev
50private-tmp 58private-tmp
51 59
60dbus-user none
61dbus-system none
62
52#restrict-namespaces 63#restrict-namespaces