SkewedZeppelin
commented
5 years ago The private-bin will need to be updated
can you try the following as a workaround for now?
sudo sed -i 's/private-bin/#private-bin/' /etc/firejail/obs.profile;
Closed Edu4rdSHL closed 5 years ago
SkewedZeppelin
commented
5 years ago The private-bin will need to be updated
can you try the following as a workaround for now?
sudo sed -i 's/private-bin/#private-bin/' /etc/firejail/obs.profile;
Edu4rdSHL
commented
5 years ago Done, now I got:
sechacklabs@SecHackLabs ~> obs
Reading profile /etc/firejail/obs.profile
Reading profile /etc/firejail/globals.local
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/disable-xdg.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 24021, child pid 24022
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Blacklist violations are logged to syslog
Child process initialized in 89.81 ms
Attempted path: share/obs/obs-studio/locale/en-US.ini
Attempted path: /usr/share/obs/obs-studio/locale/en-US.ini
Attempted path: share/obs/obs-studio/locale.ini
Attempted path: /usr/share/obs/obs-studio/locale.ini
Attempted path: share/obs/obs-studio/themes/Dark.qss
Attempted path: /usr/share/obs/obs-studio/themes/Dark.qss
info: CPU Name: Intel(R) Core(TM) i7-7500U CPU @ 2.70GHz
info: CPU Speed: 3500.261MHz
info: Physical Cores: 2, Logical Cores: 4
info: Physical Memory: 19955MB Total, 13308MB Free
info: Kernel Version: Linux 5.1.5-zen1-1-zen
info: Distribution: "Arch Linux" Unknown
info: Window System: X11.0, Vendor: The X.Org Foundation, Version: 1.20.4
info: Portable mode: false
QMetaObject::connectSlotsByName: No matching signal for on_advAudioProps_clicked()
QMetaObject::connectSlotsByName: No matching signal for on_advAudioProps_destroyed()
QMetaObject::connectSlotsByName: No matching signal for on_program_customContextMenuRequested(QPoint)
info: OBS 23.1.0-1 (linux)
info: ---------------------------------
info: ---------------------------------
info: audio settings reset:
samples per sec: 44100
speakers: 2
info: ---------------------------------
info: Initializing OpenGL...
info: Loading up OpenGL on adapter Intel Open Source Technology Center Mesa DRI Intel(R) HD Graphics 620 (Kaby Lake GT2)
info: OpenGL loaded successfully, version 4.5 (Core Profile) Mesa 19.0.5, shading language 4.50
info: ---------------------------------
info: video settings reset:
base resolution: 1366x768
output resolution: 1364x768
downscale filter: Bicubic
fps: 60/1
format: NV12
YUV mode: 601/Partial
info: NV12 texture support not available
info: Audio monitoring device:
name: Default
id: default
info: ---------------------------------
warning: Failed to load 'en-US' text for module: 'decklink-ouput-ui.so'
libDeckLinkAPI.so: cannot open shared object file: No such file or directory
info: No blackmagic support
error: os_dlopen(libnvidia-encode.so.1->libnvidia-encode.so.1): libnvidia-encode.so.1: cannot open shared object file: No such file or directory
info: FFMPEG VAAPI supported
info: VLC found, VLC video source enabled
error: os_dlopen(/home/sechacklabs/.config/obs-studio/plugins/obs-linuxbrowser/bin/64bit/libobs-linuxbrowser.so->/home/sechacklabs/.config/obs-studio/plugins/obs-linuxbrowser/bin/64bit/libobs-linuxbrowser.so): /home/sechacklabs/.config/obs-studio/plugins/obs-linuxbrowser/bin/64bit/libobs-linuxbrowser.so: failed to map segment from shared object
warning: Module '/home/sechacklabs/.config/obs-studio/plugins/obs-linuxbrowser/bin/64bit/libobs-linuxbrowser.so' not loaded
info: ---------------------------------
info: Loaded Modules:
info: vlc-video.so
info: text-freetype2.so
info: rtmp-services.so
info: obs-x264.so
info: obs-transitions.so
info: obs-outputs.so
info: obs-libfdk.so
info: obs-filters.so
info: obs-ffmpeg.so
info: linux-v4l2.so
info: linux-pulseaudio.so
info: linux-jack.so
info: linux-decklink.so
info: linux-capture.so
info: linux-alsa.so
info: image-source.so
info: frontend-tools.so
info: decklink-ouput-ui.so
info: ---------------------------------
info: ==== Startup complete ===============================================
info: All scene data cleared
info: ------------------------------------------------
info: pulse-input: Server name: 'pulseaudio 12.2'
info: pulse-input: Audio format: s16le, 44100 Hz, 2 channels
info: pulse-input: Started recording from 'alsa_output.pci-0000_00_1f.3.analog-stereo.monitor'
info: pulse-input: Server name: 'pulseaudio 12.2'
info: pulse-input: Audio format: s16le, 44100 Hz, 2 channels
info: pulse-input: Started recording from 'alsa_input.pci-0000_00_1f.3.analog-stereo'
info: xshm-input: Geometry 1366x768 @ 0,0
error: Source ID 'linuxbrowser-source' not found
error: Failed to create source 'External Camera'!
info: Switched to scene 'Scene'
info: ------------------------------------------------
info: Loaded scenes:
info: - scene 'Scene':
info: - source: 'Screen Capture (XSHM)' (xshm_input)
info: - source: 'External Camera' (linuxbrowser-source)
info: ------------------------------------------------
Attempted path: share/obs/obs-studio/images/overflow.png
Attempted path: /usr/share/obs/obs-studio/images/overflow.png
info: adding 46 milliseconds of audio buffering, total audio buffering is now 46 milliseconds (source: Mic/Aux)
info: ---------------------------------
info: [x264 encoder: 'simple_h264_recording'] preset: veryfast
info: [x264 encoder: 'simple_h264_recording'] profile: high
info: [x264 encoder: 'simple_h264_recording'] settings:
rate_control: CRF
bitrate: 0
buffer size: 0
crf: 14
fps_num: 60
fps_den: 1
width: 1364
height: 768
keyint: 250
info: libfdk_aac encoder created
info: libfdk_aac bitrate: 128, channels: 2
info: ==== Recording Start ===============================================
info: [ffmpeg muxer: 'simple_file_output'] Writing file '/home/sechacklabs/Videos/2019-05-26_23-29-45.mkv'...
sh: /usr/share/obs/obs-plugins/obs-ffmpeg/ffmpeg-mux: Permission denied
warning: [ffmpeg muxer: 'simple_file_output'] os_process_pipe_write for packet data failed
info: [ffmpeg muxer: 'simple_file_output'] Output of file '/home/sechacklabs/Videos/2019-05-26_23-29-45.mkv' stopped
info: Output 'simple_file_output': stopping
info: Output 'simple_file_output': Total frames output: 1
info: Output 'simple_file_output': Total drawn frames: 24
info: ==== Recording Stop ================================================
info: libfdk_aac encoder destroyedsudo sed -i 's/include disable-exec.inc/#include disable-exec.inc' /etc/firejail/obs.profile; ?
Edu4rdSHL
commented
5 years ago Same error:
info: libfdk_aac encoder created
info: libfdk_aac bitrate: 128, channels: 2
info: ==== Recording Start ===============================================
info: [ffmpeg muxer: 'simple_file_output'] Writing file '/home/sechacklabs/Videos/2019-05-26_23-39-42.mkv'...
sh: /usr/share/obs/obs-plugins/obs-ffmpeg/ffmpeg-mux: Permission denied
warning: [ffmpeg muxer: 'simple_file_output'] os_process_pipe_write for packet data failed
info: [ffmpeg muxer: 'simple_file_output'] Output of file '/home/sechacklabs/Videos/2019-05-26_23-39-42.mkv' stopped
info: Output 'simple_file_output': stopping
info: Output 'simple_file_output': Total frames output: 1
info: Output 'simple_file_output': Total drawn frames: 24
info: ==== Recording Stop ================================================
info: libfdk_aac encoder destroyedAnd JFYI: add / to #include disable-exec.inc in the sed command, it sould be: sudo sed -i 's/include disable-exec.inc/#include disable-exec.inc/' /etc/firejail/obs.profile;
rusty-snake
commented
5 years ago @Edu4rdSHL what is in your /etc/firejail/globals.local?
Edu4rdSHL
commented
5 years ago sechacklabs@SecHackLabs ~> cat /etc/firejail/globals.local
# enable Apparmor globally
apparmor
Vincent43
commented
5 years ago @Edu4rdSHL add /usr/share/obs/** ix, to /etc/apparmor.d/local/firejail-local then run sudo apparmor_parser -r /etc/apparmor.d/firejail-default
Edu4rdSHL
commented
5 years ago AppArmor parser error for /etc/apparmor.d/firejail-default in /etc/apparmor.d/firejail-default at line 164: syntax error, unexpected TOK_CLOSE, expecting TOK_END_OF_RULE
Edit:
Adding /usr/share/obs/** ix, worked. Now I got:
sechacklabs@SecHackLabs ~> obs Reading profile /etc/firejail/obs.profile Reading profile /etc/firejail/globals.local Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-exec.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-passwdmgr.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/disable-xdg.inc Reading profile /etc/firejail/whitelist-var-common.inc Parent pid 4104, child pid 4105 77 programs installed in 38.15 ms Warning: /sbin directory link was not blacklisted Warning: /usr/sbin directory link was not blacklisted Blacklist violations are logged to syslog Child process initialized in 81.93 ms Attempted path: share/obs/obs-studio/locale/en-US.ini Attempted path: /usr/share/obs/obs-studio/locale/en-US.ini Attempted path: share/obs/obs-studio/locale.ini Attempted path: /usr/share/obs/obs-studio/locale.ini Attempted path: share/obs/obs-studio/themes/Dark.qss Attempted path: /usr/share/obs/obs-studio/themes/Dark.qss info: CPU Name: Intel(R) Core(TM) i7-7500U CPU @ 2.70GHz info: CPU Speed: 3500.106MHz info: Physical Cores: 2, Logical Cores: 4 info: Physical Memory: 19957MB Total, 17763MB Free info: Kernel Version: Linux 5.1.5-zen1-2-zen info: Distribution: "Arch Linux" Unknown info: Window System: X11.0, Vendor: The X.Org Foundation, Version: 1.20.4 info: Portable mode: false QMetaObject::connectSlotsByName: No matching signal for on_advAudioProps_clicked() QMetaObject::connectSlotsByName: No matching signal for on_advAudioProps_destroyed() QMetaObject::connectSlotsByName: No matching signal for on_program_customContextMenuRequested(QPoint) info: OBS 23.1.0-1 (linux) info: --------------------------------- info: --------------------------------- info: audio settings reset: samples per sec: 44100 speakers: 2 info: --------------------------------- info: Initializing OpenGL... info: Loading up OpenGL on adapter Intel Open Source Technology Center Mesa DRI Intel(R) HD Graphics 620 (Kaby Lake GT2) info: OpenGL loaded successfully, version 4.5 (Core Profile) Mesa 19.0.5, shading language 4.50 info: --------------------------------- info: video settings reset: base resolution: 1366x768 output resolution: 1364x768 downscale filter: Bicubic fps: 60/1 format: NV12 YUV mode: 601/Partial info: NV12 texture support not available info: Audio monitoring device: name: Default id: default info: --------------------------------- warning: Failed to load 'en-US' text for module: 'decklink-ouput-ui.so' libDeckLinkAPI.so: cannot open shared object file: No such file or directory info: No blackmagic support error: os_dlopen(libnvidia-encode.so.1->libnvidia-encode.so.1): libnvidia-encode.so.1: cannot open shared object file: No such file or directory
info: FFMPEG VAAPI supported info: VLC found, VLC video source enabled error: os_dlopen(/home/sechacklabs/.config/obs-studio/plugins/obs-linuxbrowser/bin/64bit/libobs-linuxbrowser.so->/home/sechacklabs/.config/obs-studio/plugins/obs-linuxbrowser/bin/64bit/libobs-linuxbrowser.so): /home/sechacklabs/.config/obs-studio/plugins/obs-linuxbrowser/bin/64bit/libobs-linuxbrowser.so: failed to map segment from shared object
warning: Module '/home/sechacklabs/.config/obs-studio/plugins/obs-linuxbrowser/bin/64bit/libobs-linuxbrowser.so' not loaded info: --------------------------------- info: Loaded Modules: info: vlc-video.so info: text-freetype2.so info: rtmp-services.so info: obs-x264.so info: obs-transitions.so info: obs-outputs.so info: obs-libfdk.so info: obs-filters.so info: obs-ffmpeg.so info: linux-v4l2.so info: linux-pulseaudio.so info: linux-jack.so info: linux-decklink.so info: linux-capture.so info: linux-alsa.so info: image-source.so info: frontend-tools.so info: decklink-ouput-ui.so info: --------------------------------- info: ==== Startup complete =============================================== info: All scene data cleared info: ------------------------------------------------ info: pulse-input: Server name: 'pulseaudio 12.2' info: pulse-input: Audio format: s16le, 44100 Hz, 2 channels info: pulse-input: Started recording from 'alsa_output.pci-0000_00_1f.3.analog-stereo.monitor' info: pulse-input: Server name: 'pulseaudio 12.2' info: pulse-input: Audio format: s16le, 44100 Hz, 2 channels info: pulse-input: Started recording from 'alsa_input.pci-0000_00_1f.3.analog-stereo' info: xshm-input: Geometry 1366x768 @ 0,0 error: Source ID 'linuxbrowser-source' not found error: Failed to create source 'External Camera'! info: Switched to scene 'Scene' info: ------------------------------------------------ info: Loaded scenes: info: - scene 'Scene': info: - source: 'Screen Capture (XSHM)' (xshm_input) info: - source: 'External Camera' (linuxbrowser-source) info: ------------------------------------------------ Attempted path: share/obs/obs-studio/images/overflow.png Attempted path: /usr/share/obs/obs-studio/images/overflow.png info: adding 23 milliseconds of audio buffering, total audio buffering is now 23 milliseconds (source: Desktop Audio)
info: adding 23 milliseconds of audio buffering, total audio buffering is now 46 milliseconds (source: Mic/Aux)
info: --------------------------------- info: [x264 encoder: 'simple_h264_recording'] preset: veryfast info: [x264 encoder: 'simple_h264_recording'] profile: high info: [x264 encoder: 'simple_h264_recording'] settings: rate_control: CRF bitrate: 0 buffer size: 0 crf: 14 fps_num: 60 fps_den: 1 width: 1364 height: 768 keyint: 250
info: libfdk_aac encoder created info: libfdk_aac bitrate: 128, channels: 2 warning: [ffmpeg muxer: 'simple_file_output'] Failed to create process pipe
Vincent43
commented
5 years ago What if you run firejail --ignore=apparmor obs?
Edu4rdSHL
commented
5 years ago Same result:
sechacklabs@SecHackLabs ~> firejail --ignore=apparmor obs
Reading profile /etc/firejail/obs.profile
Reading profile /etc/firejail/globals.local
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/disable-xdg.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 22875, child pid 22876
77 programs installed in 273.23 ms
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Blacklist violations are logged to syslog
Child process initialized in 733.96 ms
Attempted path: share/obs/obs-studio/locale/en-US.ini
Attempted path: /usr/share/obs/obs-studio/locale/en-US.ini
Attempted path: share/obs/obs-studio/locale.ini
Attempted path: /usr/share/obs/obs-studio/locale.ini
Attempted path: share/obs/obs-studio/themes/Dark.qss
Attempted path: /usr/share/obs/obs-studio/themes/Dark.qss
info: CPU Name: Intel(R) Core(TM) i7-7500U CPU @ 2.70GHz
info: CPU Speed: 2942.273MHz
info: Physical Cores: 2, Logical Cores: 4
info: Physical Memory: 19957MB Total, 11215MB Free
info: Kernel Version: Linux 5.1.5-zen1-2-zen
info: Distribution: "Arch Linux" Unknown
info: Window System: X11.0, Vendor: The X.Org Foundation, Version: 1.20.4
info: Portable mode: false
QMetaObject::connectSlotsByName: No matching signal for on_advAudioProps_clicked()
QMetaObject::connectSlotsByName: No matching signal for on_advAudioProps_destroyed()
QMetaObject::connectSlotsByName: No matching signal for on_program_customContextMenuRequested(QPoint)
info: OBS 23.1.0-1 (linux)
info: ---------------------------------
info: ---------------------------------
info: audio settings reset:
samples per sec: 44100
speakers: 2
info: ---------------------------------
info: Initializing OpenGL...
info: Loading up OpenGL on adapter Intel Open Source Technology Center Mesa DRI Intel(R) HD Graphics 620 (Kaby Lake GT2)
info: OpenGL loaded successfully, version 4.5 (Core Profile) Mesa 19.0.5, shading language 4.50
info: ---------------------------------
info: video settings reset:
base resolution: 1366x768
output resolution: 1364x768
downscale filter: Bicubic
fps: 60/1
format: NV12
YUV mode: 601/Partial
info: NV12 texture support not available
info: Audio monitoring device:
name: Default
id: default
info: ---------------------------------
warning: Failed to load 'en-US' text for module: 'decklink-ouput-ui.so'
libDeckLinkAPI.so: cannot open shared object file: No such file or directory
info: No blackmagic support
error: os_dlopen(libnvidia-encode.so.1->libnvidia-encode.so.1): libnvidia-encode.so.1: cannot open shared object file: No such file or directory
info: FFMPEG VAAPI supported
info: VLC found, VLC video source enabled
error: os_dlopen(/home/sechacklabs/.config/obs-studio/plugins/obs-linuxbrowser/bin/64bit/libobs-linuxbrowser.so->/home/sechacklabs/.config/obs-studio/plugins/obs-linuxbrowser/bin/64bit/libobs-linuxbrowser.so): /home/sechacklabs/.config/obs-studio/plugins/obs-linuxbrowser/bin/64bit/libobs-linuxbrowser.so: failed to map segment from shared object
warning: Module '/home/sechacklabs/.config/obs-studio/plugins/obs-linuxbrowser/bin/64bit/libobs-linuxbrowser.so' not loaded
info: ---------------------------------
info: Loaded Modules:
info: vlc-video.so
info: text-freetype2.so
info: rtmp-services.so
info: obs-x264.so
info: obs-transitions.so
info: obs-outputs.so
info: obs-libfdk.so
info: obs-filters.so
info: obs-ffmpeg.so
info: linux-v4l2.so
info: linux-pulseaudio.so
info: linux-jack.so
info: linux-decklink.so
info: linux-capture.so
info: linux-alsa.so
info: image-source.so
info: frontend-tools.so
info: decklink-ouput-ui.so
info: ---------------------------------
info: ==== Startup complete ===============================================
info: All scene data cleared
info: ------------------------------------------------
info: pulse-input: Server name: 'pulseaudio 12.2'
info: pulse-input: Audio format: s16le, 44100 Hz, 2 channels
info: pulse-input: Started recording from 'bluez_sink.11_11_11_11_24_4B.a2dp_sink.monitor'
info: pulse-input: Server name: 'pulseaudio 12.2'
info: pulse-input: Audio format: s16le, 44100 Hz, 2 channels
info: pulse-input: Started recording from 'alsa_input.pci-0000_00_1f.3.analog-stereo'
error: Source ID 'linuxbrowser-source' not found
error: Failed to create source 'External Camera'!
info: xshm-input: Geometry 1366x768 @ 0,0
info: Switched to scene 'Scene'
info: ------------------------------------------------
info: Loaded scenes:
info: - scene 'Scene':
info: - source: 'Screen Capture (XSHM)' (xshm_input)
info: - source: 'External Camera' (linuxbrowser-source)
info: ------------------------------------------------
Attempted path: share/obs/obs-studio/images/overflow.png
Attempted path: /usr/share/obs/obs-studio/images/overflow.png
info: adding 23 milliseconds of audio buffering, total audio buffering is now 23 milliseconds (source: Desktop Audio)
info: ---------------------------------
info: [x264 encoder: 'simple_h264_recording'] preset: veryfast
info: [x264 encoder: 'simple_h264_recording'] profile: high
info: [x264 encoder: 'simple_h264_recording'] settings:
rate_control: CRF
bitrate: 0
buffer size: 0
crf: 14
fps_num: 60
fps_den: 1
width: 1364
height: 768
keyint: 250
info: libfdk_aac encoder created
info: libfdk_aac bitrate: 128, channels: 2
warning: [ffmpeg muxer: 'simple_file_output'] Failed to create process pipe
Fred-Barclay
commented
5 years ago @Edu4rdSHL Can you check that fe8f43e0d7b067d315cf38eed6c78aec9cea7881 fixes this? It seems fine on my Arch system.
Edu4rdSHL
commented
5 years ago @Fred-Barclay it worked, but you can remove bash from there.
Fred-Barclay
commented
5 years ago Thanks @Edu4rdSHL :smile:
Usually when we add sh to private-bin we add bash as well (some programs won't work if the default shell is bash and it's not included in private-bin)
Edu4rdSHL
commented
5 years ago Ok, thank you, I don't know about that :). Great fix.
The following error is present when launching obs studio using the firejail profile: