netblue30 / firejail

Linux namespaces and seccomp-bpf sandbox

Home Page:https://firejail.wordpress.com

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

ani-cli profile breaks mpv-uosc

jtrv opened this issue · comments

commented

Description

Using the default ani-cli.profile breaks uosc.

Steps to Reproduce

Steps to reproduce the behavior

paru -S firejail mpv mpv-uosc-git ani-cli-git
sudo firecfg
ani-cli 'cowboy bebop' -S 3 -e 1

Expected behavior

Hovering over the edges of the window should show pieces of the UOSC UI.

Actual behavior

No UI is displayed.

Behavior without a profile

Works as expected, UI displays.

Additional context

https://github.com/netblue30/firejail/blob/master/etc/profile-a-l/ani-cli.profile
https://github.com/pystardust/ani-cli
https://github.com/tomasklaen/uosc

Environment

  • Arch Linux 6.7.2-zen1-2-zen
  • firejail-git f7e2c25

Checklist

  • The issues is caused by firejail (i.e. running the program by path (e.g. /usr/bin/vlc) "fixes" it).
  • I can reproduce the issue without custom modifications (e.g. globals.local).
  • The program has a profile. (If not, request one in https://github.com/netblue30/firejail/issues/1139)
  • The profile (and redirect profile if exists) hasn't already been fixed upstream.
  • I have performed a short search for similar issues (to avoid opening a duplicate).
    • I'm aware of browser-allow-drm yes/browser-disable-u2f no in firejail.config to allow DRM/U2F in browsers.
  • I used --profile=PROFILENAME to set the right profile. (Only relevant for AppImages)

Log

https://paste.rs/XrDdI.txt

From your log:

L56 --> xdg-dbus-proxy arg: --own=org.mpris.MediaPlayer2.mpv

There's no dbus-filtering in our {ani-cli,mpv}.profile. And that log doesn't show any trace of a .local override being used. What's going on? Did you use other options on CLI we're not seeing in your issue report?

L2756 Not enforcing Landlock

Is this firejail from git? In fact, I assume it must be, as there isn't any ani-cli.profile in 0.9.72 AFAICT. That makes this all a bit confusing.

That being said, I installed ani-cli-git from the AUR and it works just fine with firejail from git. Full uosc UI shows without needing anything extra here.