netblue30 / firejail

Linux namespaces and seccomp-bpf sandbox
https://firejail.wordpress.com
GNU General Public License v2.0
5.79k stars 567 forks source link

steam: cannot launch games (seccomp) #4415

Closed rsramkis closed 3 years ago

rsramkis commented 3 years ago

When Firejail is enable (sudo firecfg) The Steam and Steam-Native graphical applications launches and appears to be fully functional. When I try to launch a game (e.g. 'Root') it starts and then stops.

To troubleshoot:

(1) I disbled firejail is (sudo firecfg --clean) and the test game 'Root' launches successfully.

(2) I enable firejail (sudo firecfg) and I can launch Steam from command line with no profile (firejail --noprofile steam) and Steam and the test game 'Root' launch successfully.

(3) Tried to review the below logs and compare with what is in the steam.profile to see what might be missing in the settings.

Environment: System: Host: mani Kernel: 5.10.51-1-lts x86_64 bits: 64 Desktop: GNOME 40.3 Distro: EndeavourOS

Logs:

Game Launch Successful:

firejail --noprofile steam

output (click me) ``` firejail --noprofile steam Parent pid 45989, child pid 45992 Child process initialized in 4.22 ms Warning: an existing sandbox was detected. /usr/bin/steam will run without any additional sandboxing features Running Steam on endeavouros rolling 64-bit STEAM_RUNTIME is enabled automatically Steam runtime environment up-to-date! Steam client's requirements are satisfied WARNING: Using default/fallback debugger launch /home/rsruser/.local/share/Steam/ubuntu12_32/steam [2021-07-21 18:06:25] Startup - updater built Jul 16 2021 18:04:56 Installing breakpad exception handler for appid(steam)/version(1626461631) [2021-07-21 18:06:26] Loading cached metrics from disk (/home/rsruser/.local/share/Steam/package/steam_client_metrics.bin) [2021-07-21 18:06:26] Using the following download hosts for Public, Realm steamglobal [2021-07-21 18:06:26] 1. https://cdn.cloudflare.steamstatic.com, /client/, Realm 'steamglobal', weight was 100, source = 'update_hosts_cached.vdf' [2021-07-21 18:06:26] 2. https://cdn.akamai.steamstatic.com, /client/, Realm 'steamglobal', weight was 100, source = 'update_hosts_cached.vdf' [2021-07-21 18:06:26] 3. http://media.steampowered.com, /client/, Realm 'steamglobal', weight was 1, source = 'baked in' Installing breakpad exception handler for appid(steam)/version(1626461631) [2021-07-21 18:06:26] Verifying installation... [2021-07-21 18:06:26] Verification complete Loaded SDL version 2.0.15-6655637 (steam:153): Gtk-WARNING **: 18:06:26.271: Unable to locate theme engine in module_path: "adwaita", (steam:153): Gtk-WARNING **: 18:06:26.272: Unable to locate theme engine in module_path: "adwaita", /usr/share/themes/WhiteSur-dark/gtk-2.0/main.rc:1189: error: unexpected identifier 'direction', expected character '}' /usr/share/themes/WhiteSur-dark/gtk-2.0/apps.rc:91: error: unexpected identifier 'direction', expected character '}' Steam: An X Error occurred X Error of failed request: BadAtom (invalid Atom parameter) Major opcode of failed request: 20 (X_GetProperty) Atom id in failed request: 0x0 Serial number of failed request: 12 xerror_handler: X failed, continuing Steam: An X Error occurred X Error of failed request: BadAtom (invalid Atom parameter) Major opcode of failed request: 20 (X_GetProperty) Atom id in failed request: 0x0 Serial number of failed request: 13 xerror_handler: X failed, continuing Steam: An X Error occurred X Error of failed request: BadAtom (invalid Atom parameter) Major opcode of failed request: 20 (X_GetProperty) Atom id in failed request: 0x0 Serial number of failed request: 14 xerror_handler: X failed, continuing Installing breakpad exception handler for appid(steam)/version(1626461631) STEAM_RUNTIME_HEAVY: ./steam-runtime-heavy [0721/180626.463776:INFO:crash_reporting.cc(247)] Crash reporting enabled for process: browser [0721/180626.493395:WARNING:crash_reporting.cc(286)] Failed to set crash key: UserID with value: 0 [0721/180626.493469:WARNING:crash_reporting.cc(286)] Failed to set crash key: BuildID with value: 1626458736 [0721/180626.493482:WARNING:crash_reporting.cc(286)] Failed to set crash key: SteamUniverse with value: Public [0721/180626.493491:WARNING:crash_reporting.cc(286)] Failed to set crash key: Vendor with value: Valve /usr/lib/gio/modules/libdconfsettings.so: undefined symbol: g_log_structured_standard Failed to load module: /usr/lib/gio/modules/libdconfsettings.so GLib-GIO-Message: Using the 'memory' GSettings backend. Your settings will not be saved or shared with other applications. [0721/180626.549265:WARNING:crash_reporting.cc(286)] Failed to set crash key: UserID with value: 0 [0721/180626.549343:WARNING:crash_reporting.cc(286)] Failed to set crash key: BuildID with value: 1626458736 [0721/180626.549354:WARNING:crash_reporting.cc(286)] Failed to set crash key: SteamUniverse with value: Public [0721/180626.549364:WARNING:crash_reporting.cc(286)] Failed to set crash key: Vendor with value: Valve [0721/180626.550321:INFO:crash_reporting.cc(247)] Crash reporting enabled for process: gpu-process [0721/180626.607096:ERROR:sandbox_linux.cc(372)] InitializeSandbox() called with multiple threads in process gpu-process. [0721/180626.647711:WARNING:crash_reporting.cc(286)] Failed to set crash key: UserID with value: 0 [0721/180626.647787:WARNING:crash_reporting.cc(286)] Failed to set crash key: BuildID with value: 1626458736 [0721/180626.647806:WARNING:crash_reporting.cc(286)] Failed to set crash key: SteamUniverse with value: Public [0721/180626.647815:WARNING:crash_reporting.cc(286)] Failed to set crash key: Vendor with value: Valve [0721/180626.648664:INFO:crash_reporting.cc(247)] Crash reporting enabled for process: utility Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) Warning: failed to set thread priority: set failed for 8: -1: setpriority() failed Warning: failed to set thread priority: set failed for priority 8 Warning: support for elevated priorities is most likely unavailable, suppressing future warnings Warning: failed to set thread priority: set failed for 8: -1: setpriority() failed Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) CApplicationManagerPopulateThread took 45 milliseconds to initialize (will have waited on CAppInfoCacheReadFromDiskThread) Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) CAppInfoCacheReadFromDiskThread took 84 milliseconds to initialize Installing breakpad exception handler for appid(steam)/version(1626461631) Proceed to auto login Opted-in Controller Mask for AppId 0: 0 Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) (steam:153): Gtk-WARNING **: 18:06:27.041: gtk_disable_setlocale() must be called before gtk_init() Installing breakpad exception handler for appid(steam)/version(1626461631) roaming config store loaded successfully - 590 bytes. migrating temporary roaming config store BRefreshApplicationsInLibrary 1: 8ms [0721/180627.903298:INFO:crash_reporting.cc(270)] Crash reporting enabled for process: renderer [0721/180627.972676:INFO:crash_reporting.cc(270)] Crash reporting enabled for process: renderer [0721/180628.047957:INFO:crash_reporting.cc(270)] Crash reporting enabled for process: renderer MESA-INTEL: warning: Performance support disabled, consider sysctl dev.i915.perf_stream_paranoid=0 Installing breakpad exception handler for appid(steam)/version(1626461631) Failed to init SteamVR because it isn't installed ExecCommandLine: "'/home/rsruser/.local/share/Steam/ubuntu12_32/steam'" System startup time: 2.23 seconds (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.444: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.444: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.444: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.444: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.445: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.445: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.445: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.445: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.445: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.445: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.445: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.445: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.445: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.445: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.445: Trying to remove a child that doesn't believe we're it's parent. [0721/180628.452607:INFO:crash_reporting.cc(270)] Crash reporting enabled for process: renderer Warning: failed to set thread priority: set failed for 4: -1: setpriority() failed Warning: failed to set thread priority: set failed for priority 4 Warning: support for elevated priorities is most likely unavailable, suppressing future warnings [0721/180628.485034:INFO:crash_reporting.cc(270)] Crash reporting enabled for process: renderer Warning: failed to set thread priority: set failed for 4: -1: setpriority() failed Warning: failed to set thread priority: set failed for priority 4 Warning: support for elevated priorities is most likely unavailable, suppressing future warnings MESA-INTEL: warning: Performance support disabled, consider sysctl dev.i915.perf_stream_paranoid=0 BuildCompleteAppOverviewChange: 153 RegisterForAppOverview 1: 18ms RegisterForAppOverview 2: 19ms [965580]Non-Steam Controller Configs Enabled: 1 Installing breakpad exception handler for appid(steam)/version(1626461631) GameAction [AppID 965580, ActionID 1] : LaunchApp changed task to ProcessingInstallScript with "" wineserver: using server-side synchronization. Installing breakpad exception handler for appid(steam)/version(1626461631) GameAction [AppID 965580, ActionID 1] : LaunchApp changed task to SiteLicenseSeatCheckout with "" GameAction [AppID 965580, ActionID 1] : LaunchApp changed task to CreatingProcess with "" GameAction [AppID 965580, ActionID 1] : LaunchApp waiting for user response to CreatingProcess "" GameAction [AppID 965580, ActionID 1] : LaunchApp continues with user response "CreatingProcess" Opted-in Controller Mask for AppId 965580: 0 /bin/sh\0-c\0/home/rsruser/.local/share/Steam/ubuntu12_32/reaper SteamLaunch AppId=965580 -- '/home/rsruser/.local/share/Steam/steamapps/common/SteamLinuxRuntime_soldier'/_v2-entry-point --verb=waitforexitandrun -- '/home/rsruser/.local/share/Steam/compatibilitytools.d/Proton-6.12-GE-1'/proton waitforexitandrun '/home/rsruser/.local/share/Steam/steamapps/common/Root/Root.exe'\0 Game update: AppID 965580 "", ProcID 655, IP 0.0.0.0:0 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. Starting app 965580 >>> Adding process 655 for game ID 965580 GameAction [AppID 965580, ActionID 1] : LaunchApp changed task to WaitingGameWindow with "" ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_64/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS64): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. GameAction [AppID 965580, ActionID 1] : LaunchApp changed task to Completed with "" ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. pid 659 != 656, skipping destruction (fork without exec?) ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 656 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 657 for game ID 965580 >>> Adding process 658 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 660 for game ID 965580 >>> Adding process 661 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 839 for game ID 965580 >>> Adding process 840 for game ID 965580 >>> Adding process 841 for game ID 965580 >>> Adding process 842 for game ID 965580 >>> Adding process 844 for game ID 965580 >>> Adding process 848 for game ID 965580 >>> Adding process 850 for game ID 965580 >>> Adding process 853 for game ID 965580 >>> Adding process 855 for game ID 965580 >>> Adding process 857 for game ID 965580 >>> Adding process 859 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 861 for game ID 965580 >>> Adding process 863 for game ID 965580 >>> Adding process 866 for game ID 965580 >>> Adding process 868 for game ID 965580 ProtonFixes[869] INFO: Running protonfixes ProtonFixes[869] INFO: Running checks ProtonFixes[869] INFO: All checks successful ProtonFixes[869] INFO: Using global defaults for "Root" (965580) ProtonFixes[869] INFO: No protonfix found for "Root" (965580) >>> Adding process 869 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. esync: up and running. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 870 for game ID 965580 >>> Adding process 871 for game ID 965580 >>> Adding process 872 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 875 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 877 for game ID 965580 >>> Adding process 880 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 888 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 899 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 905 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 917 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 927 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 929 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_64/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS64): ignored. >>> Adding process 931 for game ID 965580 Game update: AppID 965580 "", ProcID 931, IP 0.0.0.0:0 RecordSteamInterfaceCreation (PID 931): SteamUtils009 / Utils Setting breakpad minidump AppID = 965580 RecordSteamInterfaceCreation (PID 931): SteamUser019 / User Steam_SetMinidumpSteamID: Caching Steam ID: 76561198022165892 [API loaded no] RecordSteamInterfaceCreation (PID 931): SteamUser019 / User RecordSteamInterfaceCreation (PID 931): SteamFriends015 / Friends RecordSteamInterfaceCreation (PID 931): SteamUtils009 / Utils RecordSteamInterfaceCreation (PID 931): SteamMatchMaking009 / Matchmaking RecordSteamInterfaceCreation (PID 931): SteamMatchMakingServers002 / MatchmakingServers RecordSteamInterfaceCreation (PID 931): STEAMUSERSTATS_INTERFACE_VERSION011 / UserStats RecordSteamInterfaceCreation (PID 931): STEAMAPPS_INTERFACE_VERSION008 / Apps RecordSteamInterfaceCreation (PID 931): SteamNetworking005 / Networking RecordSteamInterfaceCreation (PID 931): STEAMREMOTESTORAGE_INTERFACE_VERSION014 / RemoteStorage RecordSteamInterfaceCreation (PID 931): STEAMSCREENSHOTS_INTERFACE_VERSION003 / Screenshots RecordSteamInterfaceCreation (PID 931): STEAMHTTP_INTERFACE_VERSION002 / HTTP RecordSteamInterfaceCreation (PID 931): SteamController006 / Controller RecordSteamInterfaceCreation (PID 931): STEAMUGC_INTERFACE_VERSION010 / UGC RecordSteamInterfaceCreation (PID 931): STEAMAPPLIST_INTERFACE_VERSION001 / AppList RecordSteamInterfaceCreation (PID 931): STEAMMUSIC_INTERFACE_VERSION001 / Music RecordSteamInterfaceCreation (PID 931): STEAMMUSICREMOTE_INTERFACE_VERSION001 / MusicRemote RecordSteamInterfaceCreation (PID 931): STEAMHTMLSURFACE_INTERFACE_VERSION_004 / HTMLSurface RecordSteamInterfaceCreation (PID 931): STEAMINVENTORY_INTERFACE_V002 / Inventory RecordSteamInterfaceCreation (PID 931): STEAMVIDEO_INTERFACE_V002 / Video RecordSteamInterfaceCreation (PID 931): STEAMPARENTALSETTINGS_INTERFACE_VERSION001 / ParentalSettings ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 935 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 937 for game ID 965580 MESA-INTEL: warning: Performance support disabled, consider sysctl dev.i915.perf_stream_paranoid=0 Fossilize INFO: Overriding serialization path: "/home/rsruser/.local/share/Steam/steamapps/shadercache/965580/fozpipelinesv5/steamapprun_pipeline_cache". Installing breakpad exception handler for appid(steam)/version(1626461631) Game update: AppID 965580 "", ProcID 935, IP 0.0.0.0:0 RecordSteamInterfaceCreation (PID 935): SteamUtils009 / Utils RecordSteamInterfaceCreation (PID 935): SteamUser020 / User RecordSteamInterfaceCreation (PID 935): SteamInput001 / RecordSteamInterfaceCreation (PID 935): SteamUtils009 / Utils RecordSteamInterfaceCreation (PID 935): SteamController007 / Controller RecordSteamInterfaceCreation (PID 935): SteamInput001 / Controller RecordSteamInterfaceCreation (PID 935): SteamUser020 / RecordSteamInterfaceCreation (PID 935): SteamUtils009 / RecordSteamInterfaceCreation (PID 935): STEAMAPPS_INTERFACE_VERSION008 / Installing breakpad exception handler for appid(steam)/version(1626461631) ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 1033 for game ID 965580 pid 873 != 872, skipping destruction (fork without exec?) Game removed: AppID 965580 "", ProcID 935 Game 965580 created interface STEAMAPPS_INTERFACE_VERSION008 / Game 965580 created interface SteamController007 / Controller Game 965580 created interface SteamInput001 / Game 965580 created interface SteamInput001 / Controller Game 965580 created interface SteamUser020 / Game 965580 created interface SteamUser020 / User Game 965580 created interface SteamUtils009 / Game 965580 created interface SteamUtils009 / Utils Game 965580 method call count for IClientAudio::GetVoiceOptimalSampleRate : 1 Game 965580 method call count for IClientAppManager::IsAppDlcInstalled : 6 Game 965580 method call count for IClientUtils::RecordSteamInterfaceCreation : 9 Game 965580 method call count for IClientUtils::GetAppID : 11 Game 965580 method call count for IClientUtils::GetIPCountry : 3 Game 965580 method call count for IClientUser::GetAuthSessionTicket : 1 Game 965580 method call count for IClientUser::GetSteamID : 2 Game 965580 method call count for IClientUser::BLoggedOn : 1 Uploaded AppInterfaceStats to Steam Exiting app 965580 No cached sticky mapping in ActivateActionSet.Exiting workitem thread (steam:153): GLib-GObject-CRITICAL **: 18:07:55.313: g_object_unref: assertion 'G_IS_OBJECT (object)' failed (steam:153): GLib-GObject-WARNING **: 18:07:55.313: invalid (NULL) pointer instance (steam:153): GLib-GObject-CRITICAL **: 18:07:55.313: g_signal_handlers_disconnect_matched: assertion 'G_TYPE_CHECK_INSTANCE (instance)' failed (steam:153): GLib-GObject-CRITICAL **: 18:07:55.313: g_object_unref: assertion 'G_IS_OBJECT (object)' failed [2021-07-21 18:07:55] Shutdown Parent is shutting down, bye... ```

Fails to launch game Logs:

firejail --debug steam

output (click me) ``` firejail --debug steam Parent pid 45989, child pid 45992 Child process initialized in 4.22 ms Warning: an existing sandbox was detected. /usr/bin/steam will run without any additional sandboxing features Running Steam on endeavouros rolling 64-bit STEAM_RUNTIME is enabled automatically Steam runtime environment up-to-date! Steam client's requirements are satisfied WARNING: Using default/fallback debugger launch /home/rsruser/.local/share/Steam/ubuntu12_32/steam [2021-07-21 18:06:25] Startup - updater built Jul 16 2021 18:04:56 Installing breakpad exception handler for appid(steam)/version(1626461631) [2021-07-21 18:06:26] Loading cached metrics from disk (/home/rsruser/.local/share/Steam/package/steam_client_metrics.bin) [2021-07-21 18:06:26] Using the following download hosts for Public, Realm steamglobal [2021-07-21 18:06:26] 1. https://cdn.cloudflare.steamstatic.com, /client/, Realm 'steamglobal', weight was 100, source = 'update_hosts_cached.vdf' [2021-07-21 18:06:26] 2. https://cdn.akamai.steamstatic.com, /client/, Realm 'steamglobal', weight was 100, source = 'update_hosts_cached.vdf' [2021-07-21 18:06:26] 3. http://media.steampowered.com, /client/, Realm 'steamglobal', weight was 1, source = 'baked in' Installing breakpad exception handler for appid(steam)/version(1626461631) [2021-07-21 18:06:26] Verifying installation... [2021-07-21 18:06:26] Verification complete Loaded SDL version 2.0.15-6655637 (steam:153): Gtk-WARNING **: 18:06:26.271: Unable to locate theme engine in module_path: "adwaita", (steam:153): Gtk-WARNING **: 18:06:26.272: Unable to locate theme engine in module_path: "adwaita", /usr/share/themes/WhiteSur-dark/gtk-2.0/main.rc:1189: error: unexpected identifier 'direction', expected character '}' /usr/share/themes/WhiteSur-dark/gtk-2.0/apps.rc:91: error: unexpected identifier 'direction', expected character '}' Steam: An X Error occurred X Error of failed request: BadAtom (invalid Atom parameter) Major opcode of failed request: 20 (X_GetProperty) Atom id in failed request: 0x0 Serial number of failed request: 12 xerror_handler: X failed, continuing Steam: An X Error occurred X Error of failed request: BadAtom (invalid Atom parameter) Major opcode of failed request: 20 (X_GetProperty) Atom id in failed request: 0x0 Serial number of failed request: 13 xerror_handler: X failed, continuing Steam: An X Error occurred X Error of failed request: BadAtom (invalid Atom parameter) Major opcode of failed request: 20 (X_GetProperty) Atom id in failed request: 0x0 Serial number of failed request: 14 xerror_handler: X failed, continuing Installing breakpad exception handler for appid(steam)/version(1626461631) STEAM_RUNTIME_HEAVY: ./steam-runtime-heavy [0721/180626.463776:INFO:crash_reporting.cc(247)] Crash reporting enabled for process: browser [0721/180626.493395:WARNING:crash_reporting.cc(286)] Failed to set crash key: UserID with value: 0 [0721/180626.493469:WARNING:crash_reporting.cc(286)] Failed to set crash key: BuildID with value: 1626458736 [0721/180626.493482:WARNING:crash_reporting.cc(286)] Failed to set crash key: SteamUniverse with value: Public [0721/180626.493491:WARNING:crash_reporting.cc(286)] Failed to set crash key: Vendor with value: Valve /usr/lib/gio/modules/libdconfsettings.so: undefined symbol: g_log_structured_standard Failed to load module: /usr/lib/gio/modules/libdconfsettings.so GLib-GIO-Message: Using the 'memory' GSettings backend. Your settings will not be saved or shared with other applications. [0721/180626.549265:WARNING:crash_reporting.cc(286)] Failed to set crash key: UserID with value: 0 [0721/180626.549343:WARNING:crash_reporting.cc(286)] Failed to set crash key: BuildID with value: 1626458736 [0721/180626.549354:WARNING:crash_reporting.cc(286)] Failed to set crash key: SteamUniverse with value: Public [0721/180626.549364:WARNING:crash_reporting.cc(286)] Failed to set crash key: Vendor with value: Valve [0721/180626.550321:INFO:crash_reporting.cc(247)] Crash reporting enabled for process: gpu-process [0721/180626.607096:ERROR:sandbox_linux.cc(372)] InitializeSandbox() called with multiple threads in process gpu-process. [0721/180626.647711:WARNING:crash_reporting.cc(286)] Failed to set crash key: UserID with value: 0 [0721/180626.647787:WARNING:crash_reporting.cc(286)] Failed to set crash key: BuildID with value: 1626458736 [0721/180626.647806:WARNING:crash_reporting.cc(286)] Failed to set crash key: SteamUniverse with value: Public [0721/180626.647815:WARNING:crash_reporting.cc(286)] Failed to set crash key: Vendor with value: Valve [0721/180626.648664:INFO:crash_reporting.cc(247)] Crash reporting enabled for process: utility Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) Warning: failed to set thread priority: set failed for 8: -1: setpriority() failed Warning: failed to set thread priority: set failed for priority 8 Warning: support for elevated priorities is most likely unavailable, suppressing future warnings Warning: failed to set thread priority: set failed for 8: -1: setpriority() failed Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) CApplicationManagerPopulateThread took 45 milliseconds to initialize (will have waited on CAppInfoCacheReadFromDiskThread) Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) CAppInfoCacheReadFromDiskThread took 84 milliseconds to initialize Installing breakpad exception handler for appid(steam)/version(1626461631) Proceed to auto login Opted-in Controller Mask for AppId 0: 0 Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) (steam:153): Gtk-WARNING **: 18:06:27.041: gtk_disable_setlocale() must be called before gtk_init() Installing breakpad exception handler for appid(steam)/version(1626461631) roaming config store loaded successfully - 590 bytes. migrating temporary roaming config store BRefreshApplicationsInLibrary 1: 8ms [0721/180627.903298:INFO:crash_reporting.cc(270)] Crash reporting enabled for process: renderer [0721/180627.972676:INFO:crash_reporting.cc(270)] Crash reporting enabled for process: renderer [0721/180628.047957:INFO:crash_reporting.cc(270)] Crash reporting enabled for process: renderer MESA-INTEL: warning: Performance support disabled, consider sysctl dev.i915.perf_stream_paranoid=0 Installing breakpad exception handler for appid(steam)/version(1626461631) Failed to init SteamVR because it isn't installed ExecCommandLine: "'/home/rsruser/.local/share/Steam/ubuntu12_32/steam'" System startup time: 2.23 seconds (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.444: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.444: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.444: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.444: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.445: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.445: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.445: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.445: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.445: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.445: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.445: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.445: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.445: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.445: Trying to remove a child that doesn't believe we're it's parent. (steam:153): LIBDBUSMENU-GLIB-WARNING **: 18:06:28.445: Trying to remove a child that doesn't believe we're it's parent. [0721/180628.452607:INFO:crash_reporting.cc(270)] Crash reporting enabled for process: renderer Warning: failed to set thread priority: set failed for 4: -1: setpriority() failed Warning: failed to set thread priority: set failed for priority 4 Warning: support for elevated priorities is most likely unavailable, suppressing future warnings [0721/180628.485034:INFO:crash_reporting.cc(270)] Crash reporting enabled for process: renderer Warning: failed to set thread priority: set failed for 4: -1: setpriority() failed Warning: failed to set thread priority: set failed for priority 4 Warning: support for elevated priorities is most likely unavailable, suppressing future warnings MESA-INTEL: warning: Performance support disabled, consider sysctl dev.i915.perf_stream_paranoid=0 BuildCompleteAppOverviewChange: 153 RegisterForAppOverview 1: 18ms RegisterForAppOverview 2: 19ms [965580]Non-Steam Controller Configs Enabled: 1 Installing breakpad exception handler for appid(steam)/version(1626461631) GameAction [AppID 965580, ActionID 1] : LaunchApp changed task to ProcessingInstallScript with "" wineserver: using server-side synchronization. Installing breakpad exception handler for appid(steam)/version(1626461631) GameAction [AppID 965580, ActionID 1] : LaunchApp changed task to SiteLicenseSeatCheckout with "" GameAction [AppID 965580, ActionID 1] : LaunchApp changed task to CreatingProcess with "" GameAction [AppID 965580, ActionID 1] : LaunchApp waiting for user response to CreatingProcess "" GameAction [AppID 965580, ActionID 1] : LaunchApp continues with user response "CreatingProcess" Opted-in Controller Mask for AppId 965580: 0 /bin/sh\0-c\0/home/rsruser/.local/share/Steam/ubuntu12_32/reaper SteamLaunch AppId=965580 -- '/home/rsruser/.local/share/Steam/steamapps/common/SteamLinuxRuntime_soldier'/_v2-entry-point --verb=waitforexitandrun -- '/home/rsruser/.local/share/Steam/compatibilitytools.d/Proton-6.12-GE-1'/proton waitforexitandrun '/home/rsruser/.local/share/Steam/steamapps/common/Root/Root.exe'\0 Game update: AppID 965580 "", ProcID 655, IP 0.0.0.0:0 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. Starting app 965580 >>> Adding process 655 for game ID 965580 GameAction [AppID 965580, ActionID 1] : LaunchApp changed task to WaitingGameWindow with "" ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_64/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS64): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. GameAction [AppID 965580, ActionID 1] : LaunchApp changed task to Completed with "" ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. pid 659 != 656, skipping destruction (fork without exec?) ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 656 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 657 for game ID 965580 >>> Adding process 658 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 660 for game ID 965580 >>> Adding process 661 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 839 for game ID 965580 >>> Adding process 840 for game ID 965580 >>> Adding process 841 for game ID 965580 >>> Adding process 842 for game ID 965580 >>> Adding process 844 for game ID 965580 >>> Adding process 848 for game ID 965580 >>> Adding process 850 for game ID 965580 >>> Adding process 853 for game ID 965580 >>> Adding process 855 for game ID 965580 >>> Adding process 857 for game ID 965580 >>> Adding process 859 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 861 for game ID 965580 >>> Adding process 863 for game ID 965580 >>> Adding process 866 for game ID 965580 >>> Adding process 868 for game ID 965580 ProtonFixes[869] INFO: Running protonfixes ProtonFixes[869] INFO: Running checks ProtonFixes[869] INFO: All checks successful ProtonFixes[869] INFO: Using global defaults for "Root" (965580) ProtonFixes[869] INFO: No protonfix found for "Root" (965580) >>> Adding process 869 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. esync: up and running. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 870 for game ID 965580 >>> Adding process 871 for game ID 965580 >>> Adding process 872 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 875 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 877 for game ID 965580 >>> Adding process 880 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 888 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 899 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 905 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 917 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 927 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 929 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_64/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS64): ignored. >>> Adding process 931 for game ID 965580 Game update: AppID 965580 "", ProcID 931, IP 0.0.0.0:0 RecordSteamInterfaceCreation (PID 931): SteamUtils009 / Utils Setting breakpad minidump AppID = 965580 RecordSteamInterfaceCreation (PID 931): SteamUser019 / User Steam_SetMinidumpSteamID: Caching Steam ID: 76561198022165892 [API loaded no] RecordSteamInterfaceCreation (PID 931): SteamUser019 / User RecordSteamInterfaceCreation (PID 931): SteamFriends015 / Friends RecordSteamInterfaceCreation (PID 931): SteamUtils009 / Utils RecordSteamInterfaceCreation (PID 931): SteamMatchMaking009 / Matchmaking RecordSteamInterfaceCreation (PID 931): SteamMatchMakingServers002 / MatchmakingServers RecordSteamInterfaceCreation (PID 931): STEAMUSERSTATS_INTERFACE_VERSION011 / UserStats RecordSteamInterfaceCreation (PID 931): STEAMAPPS_INTERFACE_VERSION008 / Apps RecordSteamInterfaceCreation (PID 931): SteamNetworking005 / Networking RecordSteamInterfaceCreation (PID 931): STEAMREMOTESTORAGE_INTERFACE_VERSION014 / RemoteStorage RecordSteamInterfaceCreation (PID 931): STEAMSCREENSHOTS_INTERFACE_VERSION003 / Screenshots RecordSteamInterfaceCreation (PID 931): STEAMHTTP_INTERFACE_VERSION002 / HTTP RecordSteamInterfaceCreation (PID 931): SteamController006 / Controller RecordSteamInterfaceCreation (PID 931): STEAMUGC_INTERFACE_VERSION010 / UGC RecordSteamInterfaceCreation (PID 931): STEAMAPPLIST_INTERFACE_VERSION001 / AppList RecordSteamInterfaceCreation (PID 931): STEAMMUSIC_INTERFACE_VERSION001 / Music RecordSteamInterfaceCreation (PID 931): STEAMMUSICREMOTE_INTERFACE_VERSION001 / MusicRemote RecordSteamInterfaceCreation (PID 931): STEAMHTMLSURFACE_INTERFACE_VERSION_004 / HTMLSurface RecordSteamInterfaceCreation (PID 931): STEAMINVENTORY_INTERFACE_V002 / Inventory RecordSteamInterfaceCreation (PID 931): STEAMVIDEO_INTERFACE_V002 / Video RecordSteamInterfaceCreation (PID 931): STEAMPARENTALSETTINGS_INTERFACE_VERSION001 / ParentalSettings ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 935 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 937 for game ID 965580 MESA-INTEL: warning: Performance support disabled, consider sysctl dev.i915.perf_stream_paranoid=0 Fossilize INFO: Overriding serialization path: "/home/rsruser/.local/share/Steam/steamapps/shadercache/965580/fozpipelinesv5/steamapprun_pipeline_cache". Installing breakpad exception handler for appid(steam)/version(1626461631) Game update: AppID 965580 "", ProcID 935, IP 0.0.0.0:0 RecordSteamInterfaceCreation (PID 935): SteamUtils009 / Utils RecordSteamInterfaceCreation (PID 935): SteamUser020 / User RecordSteamInterfaceCreation (PID 935): SteamInput001 / RecordSteamInterfaceCreation (PID 935): SteamUtils009 / Utils RecordSteamInterfaceCreation (PID 935): SteamController007 / Controller RecordSteamInterfaceCreation (PID 935): SteamInput001 / Controller RecordSteamInterfaceCreation (PID 935): SteamUser020 / RecordSteamInterfaceCreation (PID 935): SteamUtils009 / RecordSteamInterfaceCreation (PID 935): STEAMAPPS_INTERFACE_VERSION008 / Installing breakpad exception handler for appid(steam)/version(1626461631) ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 1033 for game ID 965580 pid 873 != 872, skipping destruction (fork without exec?) Game removed: AppID 965580 "", ProcID 935 Game 965580 created interface STEAMAPPS_INTERFACE_VERSION008 / Game 965580 created interface SteamController007 / Controller Game 965580 created interface SteamInput001 / Game 965580 created interface SteamInput001 / Controller Game 965580 created interface SteamUser020 / Game 965580 created interface SteamUser020 / User Game 965580 created interface SteamUtils009 / Game 965580 created interface SteamUtils009 / Utils Game 965580 method call count for IClientAudio::GetVoiceOptimalSampleRate : 1 Game 965580 method call count for IClientAppManager::IsAppDlcInstalled : 6 Game 965580 method call count for IClientUtils::RecordSteamInterfaceCreation : 9 Game 965580 method call count for IClientUtils::GetAppID : 11 Game 965580 method call count for IClientUtils::GetIPCountry : 3 Game 965580 method call count for IClientUser::GetAuthSessionTicket : 1 Game 965580 method call count for IClientUser::GetSteamID : 2 Game 965580 method call count for IClientUser::BLoggedOn : 1 Uploaded AppInterfaceStats to Steam Exiting app 965580 No cached sticky mapping in ActivateActionSet.Exiting workitem thread (steam:153): GLib-GObject-CRITICAL **: 18:07:55.313: g_object_unref: assertion 'G_IS_OBJECT (object)' failed (steam:153): GLib-GObject-WARNING **: 18:07:55.313: invalid (NULL) pointer instance (steam:153): GLib-GObject-CRITICAL **: 18:07:55.313: g_signal_handlers_disconnect_matched: assertion 'G_TYPE_CHECK_INSTANCE (instance)' failed (steam:153): GLib-GObject-CRITICAL **: 18:07:55.313: g_object_unref: assertion 'G_IS_OBJECT (object)' failed [2021-07-21 18:07:55] Shutdown Parent is shutting down, bye... ```
davidebeatrici commented 3 years ago

Try to launch with --ignore=seccomp.

rusty-snake commented 3 years ago

If this "fixes" it: https://github.com/netblue30/firejail/blob/2b696b4d906fdc87af895627c67a1159bcca9c68/etc/templates/syscalls.txt#L89-L106

rsramkis commented 3 years ago

Try to launch with --ignore seccomp.

Hi David,

I tried your suggestion by:

(1) Disabled firejail (sudo firecfg --clean)

(2) Opened terminal and ran the command ' firejail steam --ignore seccomp'.

(3) The Steam client opened, and I opened the game 'Root'.

(4) I then attempted to launch the game and it looked like something started in Steam and Stopped. I saved the output below.

output (click me) ``` firejail steam --ignore seccomp Reading profile /etc/firejail/steam.profile Reading profile /etc/firejail/allow-java.inc Reading profile /etc/firejail/allow-python2.inc Reading profile /etc/firejail/allow-python3.inc Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-passwdmgr.inc Reading profile /etc/firejail/disable-programs.inc Warning: cannot create /home/rsruser/.steampath Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-var-common.inc Seccomp list in: !ptrace, check list: @default-keep, prelist: unknown, Parent pid 4860, child pid 4862 Warning: skipping alternatives for private /etc Warning: skipping asound.conf for private /etc Warning: skipping bumblebee for private /etc Warning: skipping crypto-policies for private /etc Warning: skipping drirc for private /etc Warning: skipping nvidia for private /etc Warning: skipping pki for private /etc Private /etc installed in 134.55 ms Private /usr/etc installed in 0.01 ms Warning: cleaning all supplementary groups Warning: cleaning all supplementary groups Seccomp list in: !ptrace, check list: @default-keep, prelist: unknown, Child process initialized in 651.85 ms Running Steam on endeavouros rolling 64-bit STEAM_RUNTIME is enabled automatically Steam runtime environment up-to-date! Steam client's requirements are satisfied WARNING: Using default/fallback debugger launch /home/rsruser/.local/share/Steam/ubuntu12_32/steam --ignore seccomp [2021-07-22 08:04:50] Startup - updater built Jul 16 2021 18:04:56 Installing breakpad exception handler for appid(steam)/version(1626461631) [2021-07-22 08:04:51] Loading cached metrics from disk (/home/rsruser/.local/share/Steam/package/steam_client_metrics.bin) [2021-07-22 08:04:51] Using the following download hosts for Public, Realm steamglobal [2021-07-22 08:04:51] 1. https://cdn.cloudflare.steamstatic.com, /client/, Realm 'steamglobal', weight was 100, source = 'update_hosts_cached.vdf' [2021-07-22 08:04:51] 2. https://cdn.akamai.steamstatic.com, /client/, Realm 'steamglobal', weight was 100, source = 'update_hosts_cached.vdf' [2021-07-22 08:04:51] 3. http://media.steampowered.com, /client/, Realm 'steamglobal', weight was 1, source = 'baked in' Installing breakpad exception handler for appid(steam)/version(1626461631) [2021-07-22 08:04:51] Verifying installation... [2021-07-22 08:04:51] Verification complete Loaded SDL version 2.0.15-6655637 (steam:182): Gtk-WARNING **: 08:04:51.731: Unable to locate theme engine in module_path: "adwaita", (steam:182): Gtk-WARNING **: 08:04:51.735: Unable to locate theme engine in module_path: "adwaita", /usr/share/themes/WhiteSur-dark/gtk-2.0/main.rc:1189: error: unexpected identifier 'direction', expected character '}' /usr/share/themes/WhiteSur-dark/gtk-2.0/apps.rc:91: error: unexpected identifier 'direction', expected character '}' Steam: An X Error occurred X Error of failed request: BadAtom (invalid Atom parameter) Major opcode of failed request: 20 (X_GetProperty) Atom id in failed request: 0x0 Serial number of failed request: 12 xerror_handler: X failed, continuing Steam: An X Error occurred X Error of failed request: BadAtom (invalid Atom parameter) Major opcode of failed request: 20 (X_GetProperty) Atom id in failed request: 0x0 Serial number of failed request: 13 xerror_handler: X failed, continuing Steam: An X Error occurred X Error of failed request: BadAtom (invalid Atom parameter) Major opcode of failed request: 20 (X_GetProperty) Atom id in failed request: 0x0 Serial number of failed request: 14 xerror_handler: X failed, continuing Installing breakpad exception handler for appid(steam)/version(1626461631) STEAM_RUNTIME_HEAVY: ./steam-runtime-heavy [0722/080452.426109:INFO:crash_reporting.cc(247)] Crash reporting enabled for process: browser [0722/080452.529487:WARNING:crash_reporting.cc(286)] Failed to set crash key: UserID with value: 0 [0722/080452.529727:WARNING:crash_reporting.cc(286)] Failed to set crash key: BuildID with value: 1626458736 [0722/080452.529757:WARNING:crash_reporting.cc(286)] Failed to set crash key: SteamUniverse with value: Public [0722/080452.529790:WARNING:crash_reporting.cc(286)] Failed to set crash key: Vendor with value: Valve /usr/lib/gio/modules/libdconfsettings.so: undefined symbol: g_log_structured_standard Failed to load module: /usr/lib/gio/modules/libdconfsettings.so GLib-GIO-Message: Using the 'memory' GSettings backend. Your settings will not be saved or shared with other applications. [0722/080452.692657:WARNING:crash_reporting.cc(286)] Failed to set crash key: UserID with value: 0 [0722/080452.692888:WARNING:crash_reporting.cc(286)] Failed to set crash key: BuildID with value: 1626458736 [0722/080452.692985:WARNING:crash_reporting.cc(286)] Failed to set crash key: SteamUniverse with value: Public [0722/080452.693039:WARNING:crash_reporting.cc(286)] Failed to set crash key: Vendor with value: Valve [0722/080452.695707:INFO:crash_reporting.cc(247)] Crash reporting enabled for process: gpu-process [0722/080452.900174:ERROR:sandbox_linux.cc(372)] InitializeSandbox() called with multiple threads in process gpu-process. [0722/080453.042943:WARNING:crash_reporting.cc(286)] Failed to set crash key: UserID with value: 0 [0722/080453.043161:WARNING:crash_reporting.cc(286)] Failed to set crash key: BuildID with value: 1626458736 [0722/080453.043241:WARNING:crash_reporting.cc(286)] Failed to set crash key: SteamUniverse with value: Public [0722/080453.043295:WARNING:crash_reporting.cc(286)] Failed to set crash key: Vendor with value: Valve [0722/080453.045936:INFO:crash_reporting.cc(247)] Crash reporting enabled for process: utility Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) CApplicationManagerPopulateThread took 63 milliseconds to initialize (will have waited on CAppInfoCacheReadFromDiskThread) Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) Warning: failed to set thread priority: set failed for 8: -1: setpriority() failed Warning: failed to set thread priority: set failed for priority 8 Warning: support for elevated priorities is most likely unavailable, suppressing future warnings Warning: failed to set thread priority: set failed for 8: -1: setpriority() failed Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) CAppInfoCacheReadFromDiskThread took 368 milliseconds to initialize Installing breakpad exception handler for appid(steam)/version(1626461631) Proceed to auto login Installing breakpad exception handler for appid(steam)/version(1626461631) Opted-in Controller Mask for AppId 0: 0 Installing breakpad exception handler for appid(steam)/version(1626461631) (steam:182): Gtk-WARNING **: 08:04:54.360: gtk_disable_setlocale() must be called before gtk_init() Installing breakpad exception handler for appid(steam)/version(1626461631) roaming config store loaded successfully - 1994 bytes. migrating temporary roaming config store BRefreshApplicationsInLibrary 1: 39ms MESA-INTEL: warning: Performance support disabled, consider sysctl dev.i915.perf_stream_paranoid=0 [0722/080456.026887:INFO:crash_reporting.cc(270)] Crash reporting enabled for process: renderer MESA-INTEL: warning: Performance support disabled, consider sysctl dev.i915.perf_stream_paranoid=0 [0722/080456.310693:INFO:crash_reporting.cc(270)] Crash reporting enabled for process: renderer [0722/080456.578723:INFO:crash_reporting.cc(270)] Crash reporting enabled for process: renderer Installing breakpad exception handler for appid(steam)/version(1626461631) Failed to init SteamVR because it isn't installed ExecCommandLine: "'/home/rsruser/.local/share/Steam/ubuntu12_32/steam' '--ignore' 'seccomp'" System startup time: 6.23 seconds (steam:182): LIBDBUSMENU-GLIB-WARNING **: 08:04:57.782: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 08:04:57.783: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 08:04:57.783: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 08:04:57.784: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 08:04:57.784: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 08:04:57.784: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 08:04:57.785: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 08:04:57.785: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 08:04:57.785: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 08:04:57.785: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 08:04:57.786: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 08:04:57.786: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 08:04:57.786: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 08:04:57.786: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 08:04:57.786: Trying to remove a child that doesn't believe we're it's parent. [0722/080457.819407:INFO:crash_reporting.cc(270)] Crash reporting enabled for process: renderer Warning: failed to set thread priority: set failed for 4: -1: setpriority() failed Warning: failed to set thread priority: set failed for priority 4 Warning: support for elevated priorities is most likely unavailable, suppressing future warnings [0722/080457.891523:INFO:crash_reporting.cc(270)] Crash reporting enabled for process: renderer Warning: failed to set thread priority: set failed for 4: -1: setpriority() failed Warning: failed to set thread priority: set failed for priority 4 Warning: support for elevated priorities is most likely unavailable, suppressing future warnings BuildCompleteAppOverviewChange: 153 RegisterForAppOverview 1: 79ms RegisterForAppOverview 2: 80ms [965580]Non-Steam Controller Configs Enabled: 1 Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) GameAction [AppID 965580, ActionID 1] : LaunchApp changed task to ProcessingInstallScript with "" pressure-vessel-wrap[405]: E: Cannot run bwrap: wait status 256 pressure-vessel-wrap[405]: E: Diagnostic output: bwrap: Failed to make / slave: Operation not permitted GameAction [AppID 965580, ActionID 1] : LaunchApp changed task to SiteLicenseSeatCheckout with "" GameAction [AppID 965580, ActionID 1] : LaunchApp changed task to CreatingProcess with "" GameAction [AppID 965580, ActionID 1] : LaunchApp waiting for user response to CreatingProcess "" GameAction [AppID 965580, ActionID 1] : LaunchApp continues with user response "CreatingProcess" Opted-in Controller Mask for AppId 965580: 0 /bin/sh\0-c\0/home/rsruser/.local/share/Steam/ubuntu12_32/reaper SteamLaunch AppId=965580 -- '/home/rsruser/.local/share/Steam/steamapps/common/SteamLinuxRuntime_soldier'/_v2-entry-point --verb=waitforexitandrun -- '/home/rsruser/.local/share/Steam/compatibilitytools.d/Proton-6.12-GE-1'/proton waitforexitandrun '/home/rsruser/.local/share/Steam/steamapps/common/Root/Root.exe'\0 Game update: AppID 965580 "", ProcID 414, IP 0.0.0.0:0 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. Starting app 965580 >>> Adding process 414 for game ID 965580 GameAction [AppID 965580, ActionID 1] : LaunchApp changed task to WaitingGameWindow with "" ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_64/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS64): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. GameAction [AppID 965580, ActionID 1] : LaunchApp changed task to Completed with "" ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 415 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 416 for game ID 965580 pid 421 != 415, skipping destruction (fork without exec?) ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 417 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 423 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 424 for game ID 965580 pressure-vessel-wrap[415]: E: Cannot run bwrap: wait status 256 pressure-vessel-wrap[415]: E: Diagnostic output: bwrap: Failed to make / slave: Operation not permitted Game removed: AppID 965580 "", ProcID 414 Uploaded AppInterfaceStats to Steam Exiting app 965580 No cached sticky mapping in ActivateActionSet.Installing breakpad exception handler for appid(steam)/version(1626461631) Installing breakpad exception handler for appid(steam)/version(1626461631) Exiting workitem thread (steam:182): GLib-GObject-CRITICAL **: 08:05:25.056: g_object_unref: assertion 'G_IS_OBJECT (object)' failed (steam:182): GLib-GObject-WARNING **: 08:05:25.057: invalid (NULL) pointer instance (steam:182): GLib-GObject-CRITICAL **: 08:05:25.057: g_signal_handlers_disconnect_matched: assertion 'G_TYPE_CHECK_INSTANCE (instance)' failed (steam:182): GLib-GObject-CRITICAL **: 08:05:25.058: g_object_unref: assertion 'G_IS_OBJECT (object)' failed [2021-07-22 08:05:25] Shutdown ```

EDIT by @rusty-snake: details-summary for long output

rsramkis commented 3 years ago

If this "fixes" it:

https://github.com/netblue30/firejail/blob/2b696b4d906fdc87af895627c67a1159bcca9c68/etc/templates/syscalls.txt#L89-L106

I tried ' firejail steam --ignore seccomp' but I was not able to launch the game successfully.

rusty-snake commented 3 years ago

--ignore=seccomp (with equal-sign btw) is a firejail argument.

rsramkis commented 3 years ago

--ignore=seccomp (with equal-sign btw) is a firejail argument.

My Bad. So I changed to "firejail --ignore=seccomp steam" and I can now launch the test game.

I did an additional test (shortcut) and allowed debuggers and the test game launched also.

Added to steam.profile

# allow-debuggers needed for running some games with proton
allow-debuggers

I will now start using your recommendation to trace out what it is about Steam which is breaking the profile. One interesting point is the older version of Steam (on my Manjaro Laptop) is not having any issues with Firejail. So must be some new behavior in Steam (there is new things ever since Pipewire Audio was introduced).

A follow up question:

(1) Is this the best place to go for a newbie to learn how to write firejail profile? https://github.com/netblue30/firejail/wiki/Creating-Profiles

(2) Does the troubleshooting technique change if I was to use the Flatpak version Steam?

rusty-snake commented 3 years ago
  1. Probably yes, I do not know a better one.
  2. Yes, because then you don't use firejail anymore

I will now start using your recommendation to trace out what it is about Steam which is breaking the profile.

With newer firejail versions it is recommended to use --seccomp-error-action=log. I should update syscalls.txt ...

davidebeatrici commented 3 years ago

Sorry, the argument indeed requires the equal-sign.

I personally added ignore seccomp to ~/.config/firejail/steam.profile because a few games would just cause a launch loop.

rsramkis commented 3 years ago

I did some more testing this evening and got some weird results.

Test:

(1) In a new "terminal1' I used terminal command 'sudo journalctl --grep=syscall --follow`.

(2) Launched Steam "firejail steam > test-steam-launch-root.txt" in terminal 2.

(3) I launch the test game 'Root' and it fails to launch.

(3) Alls I see in Terminal 1 is :+1:

sudo journalctl --grep=syscall --follow
[sudo] password for rsruser:
-- Journal begins at Wed 2021-07-14 23:15:15 EDT. --
Jul 22 21:27:49 mani dbus-daemon[593]: [system] Activating via systemd: service name='org.freedesktop.home1' unit='dbus-org.freedesktop.home1.service' requested by ':1.134' (uid=0 pid=41284 comm="sudo journalctl --grep=syscall --follow ")
Jul 22 21:27:49 mani sudo[41284]:  rsruser : TTY=pts/1 ; PWD=/home/rsruser ; USER=root ; COMMAND=/usr/bin/journalctl --grep=syscall --follow

So figure I would share to see if you have any suggestions. Thanks.

test-steam-launch-root.txt

rusty-snake commented 3 years ago

So figure I would share to see if you have any suggestions.

--seccomp-error-action=log

rsramkis commented 3 years ago

So pretty much I should run:

firejail --seccomp-error-action=log steam

rsramkis commented 3 years ago

Hi,

Thanks for your patience while I do a little juggling. So I ran the command "firejail --seccomp-error-action=log steam" and the test game 'Root' launched with no issues. To do a sanity check I launched steam again with 'firejail steam' and was able to re-produce the problem.

I've attached the logs for "firejail --seccomp-error-action=log steam" just in case it might help us figure out what is going on,

firecfg --version firecfg version 0.9.66 test-steam-launch-root.txt

rusty-snake commented 3 years ago

So I ran the command "firejail --seccomp-error-action=log steam" and the test game 'Root' launched with no issues. To do a sanity check I launched steam again with 'firejail steam' and was able to re-produce the problem.

That's because --seccomp-error-action=log logs seccomp violations but does not enforce them (like AppArmor in complain mode or SELinux in Permissive mode).

I've attached the logs for "firejail --seccomp-error-action=log steam" just in case it might help us figure out what is going on,

+1 however the seccomp logs are in your syslog. (see https://github.com/netblue30/firejail/issues/4415#issuecomment-884680570)

In rare cases a program just don't work with seccomp, I've already saw a program that had hangs with just seccomp.drop @swap.

rsramkis commented 3 years ago

The command I ran in the separate terminal to read the journals while re-producing was "journalctl --grep=syscall --follow". This did not capture any output when using the "firejail --seccomp-error-action=log steam".

So if I have done everything right here, assume we chalk up the solution for now as Added to steam.profile:

# allow-debuggers needed for running some games with proton
allow-debuggers

This development system EndeavorOS, but my daily driver is Manjaro which won't be upgraded for 1 month. So I may come back and post another comment in on a month to state whether I made the same change there.

rusty-snake commented 3 years ago

So adding allow-debuggers fixes it? If so, can you comment it and try to replace the seccomp command in steam.profile with

  1. seccomp !ptrace,!personality,!process_vm_readv
  2. seccomp.drop @default
  3. seccomp !ptrace,!process_vm_readv
  4. seccomp !ptrace,!personality
rsramkis commented 3 years ago

Hi Rusty-Snake

It is confirmed that enabling "allow-debuggers" fixes the launching issue of individual steam games.

(1) I then replaced the default seccomp lines:

# seccomp sometimes causes issues (see #2951, #3267).
# Add 'ignore seccomp' to your steam.local if you experience this.
seccomp !ptrace
shell none

With the following lines:

# seccomp sometimes causes issues (see #2951, #3267).
# Add 'ignore seccomp' to your steam.local if you experience this.
#seccomp !ptrace
seccomp !ptrace,!personality,!process_vm_readv
seccomp.drop @default
seccomp !ptrace,!process_vm_readv
seccomp !ptrace,!personality
shell none

(2) Ran journalctl --grep=syscall --follow` in a separate terminal.

No output produced during the test.

(3) Disabled Firejail (sudo firecfg --clean).

(4) Launched Steam (firejail steam).

(5) Steam client launched successfully. But unable to launch the test game 'Root'. Below is the terminal output:

terminal output ``` firejail steam Reading profile /etc/firejail/steam.profile Reading profile /etc/firejail/allow-java.inc Reading profile /etc/firejail/allow-python2.inc Reading profile /etc/firejail/allow-python3.inc Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-passwdmgr.inc Reading profile /etc/firejail/disable-programs.inc Warning: cannot create /home/rsruser/.steampath Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-var-common.inc Seccomp list in: !ptrace,!personality, check list: @default-keep, prelist: unknown,unknown, Seccomp list in: @default, check list: @default-keep, prelist: adjtimex,clock_adjtime,clock_settime,settimeofday,modify_ldt,lookup_dcookie,perf_event_open,process_vm_writev,delete_module,finit_module,init_module,chroot,mount,pivot_root,umount2,_sysctl,afs_syscall,create_module,get_kernel_syms,getpmsg,putpmsg,query_module,security,sysfs,tuxcall,uselib,ustat,vserver,ioperm,iopl,kexec_load,kexec_file_load,reboot,swapon,swapoff,open_by_handle_at,name_to_handle_at,ioprio_set,syslog,fanotify_init,add_key,request_key,mbind,migrate_pages,move_pages,keyctl,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,userfaultfd,acct,bpf,nfsservctl,setdomainname,sethostname,vhangup, Parent pid 15884, child pid 15886 Warning: skipping alternatives for private /etc Warning: skipping asound.conf for private /etc Warning: skipping bumblebee for private /etc Warning: skipping crypto-policies for private /etc Warning: skipping drirc for private /etc Warning: skipping nvidia for private /etc Warning: skipping pki for private /etc Private /etc installed in 241.62 ms Private /usr/etc installed in 0.01 ms Warning: cleaning all supplementary groups Warning: cleaning all supplementary groups Seccomp list in: @default, check list: @default-keep, prelist: adjtimex,clock_adjtime,clock_settime,settimeofday,modify_ldt,lookup_dcookie,perf_event_open,process_vm_writev,delete_module,finit_module,init_module,chroot,mount,pivot_root,umount2,_sysctl,afs_syscall,create_module,get_kernel_syms,getpmsg,putpmsg,query_module,security,sysfs,tuxcall,uselib,ustat,vserver,ioperm,iopl,kexec_load,kexec_file_load,reboot,swapon,swapoff,open_by_handle_at,name_to_handle_at,ioprio_set,syslog,fanotify_init,add_key,request_key,mbind,migrate_pages,move_pages,keyctl,io_setup,io_destroy,io_getevents,io_submit,io_cancel,remap_file_pages,userfaultfd,acct,bpf,nfsservctl,setdomainname,sethostname,vhangup, Child process initialized in 794.99 ms Running Steam on endeavouros rolling 64-bit STEAM_RUNTIME is enabled automatically Steam runtime environment up-to-date! Steam client's requirements are satisfied WARNING: Using default/fallback debugger launch /home/rsruser/.local/share/Steam/ubuntu12_32/steam [2021-07-28 10:06:07] Startup - updater built Jul 20 2021 22:25:51 Installing breakpad exception handler for appid(steam)/version(1626824053) [2021-07-28 10:06:07] Loading cached metrics from disk (/home/rsruser/.local/share/Steam/package/steam_client_metrics.bin) [2021-07-28 10:06:07] Using the following download hosts for Public, Realm steamglobal [2021-07-28 10:06:07] 1. https://cdn.akamai.steamstatic.com, /client/, Realm 'steamglobal', weight was 100, source = 'update_hosts_cached.vdf' [2021-07-28 10:06:07] 2. https://cdn.cloudflare.steamstatic.com, /client/, Realm 'steamglobal', weight was 100, source = 'update_hosts_cached.vdf' [2021-07-28 10:06:07] 3. http://media.steampowered.com, /client/, Realm 'steamglobal', weight was 1, source = 'baked in' Installing breakpad exception handler for appid(steam)/version(1626824053) [2021-07-28 10:06:07] Verifying installation... [2021-07-28 10:06:07] Verification complete Loaded SDL version 2.0.15-6655637 (steam:182): Gtk-WARNING **: 10:06:08.274: Unable to locate theme engine in module_path: "adwaita", (steam:182): Gtk-WARNING **: 10:06:08.279: Unable to locate theme engine in module_path: "adwaita", /usr/share/themes/WhiteSur-dark/gtk-2.0/main.rc:1189: error: unexpected identifier 'direction', expected character '}' /usr/share/themes/WhiteSur-dark/gtk-2.0/apps.rc:91: error: unexpected identifier 'direction', expected character '}' Steam: An X Error occurred X Error of failed request: BadAtom (invalid Atom parameter) Major opcode of failed request: 20 (X_GetProperty) Atom id in failed request: 0x0 Serial number of failed request: 12 xerror_handler: X failed, continuing Steam: An X Error occurred X Error of failed request: BadAtom (invalid Atom parameter) Major opcode of failed request: 20 (X_GetProperty) Atom id in failed request: 0x0 Serial number of failed request: 13 xerror_handler: X failed, continuing Steam: An X Error occurred X Error of failed request: BadAtom (invalid Atom parameter) Major opcode of failed request: 20 (X_GetProperty) Atom id in failed request: 0x0 Serial number of failed request: 14 xerror_handler: X failed, continuing Installing breakpad exception handler for appid(steam)/version(1626824053) STEAM_RUNTIME_HEAVY: ./steam-runtime-heavy [0728/100609.074809:INFO:crash_reporting.cc(247)] Crash reporting enabled for process: browser [0728/100609.181889:WARNING:crash_reporting.cc(286)] Failed to set crash key: UserID with value: 0 [0728/100609.182153:WARNING:crash_reporting.cc(286)] Failed to set crash key: BuildID with value: 1626819969 [0728/100609.182192:WARNING:crash_reporting.cc(286)] Failed to set crash key: SteamUniverse with value: Public [0728/100609.182222:WARNING:crash_reporting.cc(286)] Failed to set crash key: Vendor with value: Valve /usr/lib/gio/modules/libdconfsettings.so: undefined symbol: g_log_structured_standard Failed to load module: /usr/lib/gio/modules/libdconfsettings.so GLib-GIO-Message: Using the 'memory' GSettings backend. Your settings will not be saved or shared with other applications. [0728/100609.387119:WARNING:crash_reporting.cc(286)] Failed to set crash key: UserID with value: 0 [0728/100609.387436:WARNING:crash_reporting.cc(286)] Failed to set crash key: BuildID with value: 1626819969 [0728/100609.387477:WARNING:crash_reporting.cc(286)] Failed to set crash key: SteamUniverse with value: Public [0728/100609.387512:WARNING:crash_reporting.cc(286)] Failed to set crash key: Vendor with value: Valve [0728/100609.390678:INFO:crash_reporting.cc(247)] Crash reporting enabled for process: gpu-process [0728/100609.672321:ERROR:sandbox_linux.cc(372)] InitializeSandbox() called with multiple threads in process gpu-process. [0728/100609.827927:WARNING:crash_reporting.cc(286)] Failed to set crash key: UserID with value: 0 [0728/100609.828161:WARNING:crash_reporting.cc(286)] Failed to set crash key: BuildID with value: 1626819969 [0728/100609.828228:WARNING:crash_reporting.cc(286)] Failed to set crash key: SteamUniverse with value: Public [0728/100609.828266:WARNING:crash_reporting.cc(286)] Failed to set crash key: Vendor with value: Valve [0728/100609.832267:INFO:crash_reporting.cc(247)] Crash reporting enabled for process: utility Installing breakpad exception handler for appid(steam)/version(1626824053) Installing breakpad exception handler for appid(steam)/version(1626824053) Installing breakpad exception handler for appid(steam)/version(1626824053) Installing breakpad exception handler for appid(steam)/version(1626824053) Installing breakpad exception handler for appid(steam)/version(1626824053) CApplicationManagerPopulateThread took 69 milliseconds to initialize (will have waited on CAppInfoCacheReadFromDiskThread) Installing breakpad exception handler for appid(steam)/version(1626824053) Installing breakpad exception handler for appid(steam)/version(1626824053) Installing breakpad exception handler for appid(steam)/version(1626824053) Warning: failed to set thread priority: set failed for 8: -1: setpriority() failed Warning: failed to set thread priority: set failed for priority 8 Warning: support for elevated priorities is most likely unavailable, suppressing future warnings Warning: failed to set thread priority: set failed for 8: -1: setpriority() failed Installing breakpad exception handler for appid(steam)/version(1626824053) Installing breakpad exception handler for appid(steam)/version(1626824053) Installing breakpad exception handler for appid(steam)/version(1626824053) Installing breakpad exception handler for appid(steam)/version(1626824053) CAppInfoCacheReadFromDiskThread took 349 milliseconds to initialize Installing breakpad exception handler for appid(steam)/version(1626824053) Proceed to auto login Installing breakpad exception handler for appid(steam)/version(1626824053) Opted-in Controller Mask for AppId 0: 0 Installing breakpad exception handler for appid(steam)/version(1626824053) (steam:182): Gtk-WARNING **: 10:06:11.223: gtk_disable_setlocale() must be called before gtk_init() Installing breakpad exception handler for appid(steam)/version(1626824053) roaming config store loaded successfully - 1994 bytes. migrating temporary roaming config store BRefreshApplicationsInLibrary 1: 32ms MESA-INTEL: warning: Performance support disabled, consider sysctl dev.i915.perf_stream_paranoid=0 [0728/100612.824675:INFO:crash_reporting.cc(270)] Crash reporting enabled for process: renderer MESA-INTEL: warning: Performance support disabled, consider sysctl dev.i915.perf_stream_paranoid=0 [0728/100613.114283:INFO:crash_reporting.cc(270)] Crash reporting enabled for process: renderer [0728/100613.390390:INFO:crash_reporting.cc(270)] Crash reporting enabled for process: renderer Installing breakpad exception handler for appid(steam)/version(1626824053) Failed to init SteamVR because it isn't installed ExecCommandLine: "'/home/rsruser/.local/share/Steam/ubuntu12_32/steam'" System startup time: 6.51 seconds (steam:182): LIBDBUSMENU-GLIB-WARNING **: 10:06:14.591: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 10:06:14.592: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 10:06:14.592: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 10:06:14.592: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 10:06:14.593: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 10:06:14.593: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 10:06:14.593: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 10:06:14.593: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 10:06:14.594: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 10:06:14.594: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 10:06:14.594: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 10:06:14.595: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 10:06:14.595: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 10:06:14.595: Trying to remove a child that doesn't believe we're it's parent. (steam:182): LIBDBUSMENU-GLIB-WARNING **: 10:06:14.595: Trying to remove a child that doesn't believe we're it's parent. [0728/100614.629960:INFO:crash_reporting.cc(270)] Crash reporting enabled for process: renderer Warning: failed to set thread priority: set failed for 4: -1: setpriority() failed Warning: failed to set thread priority: set failed for priority 4 Warning: support for elevated priorities is most likely unavailable, suppressing future warnings [0728/100614.704533:INFO:crash_reporting.cc(270)] Crash reporting enabled for process: renderer Warning: failed to set thread priority: set failed for 4: -1: setpriority() failed Warning: failed to set thread priority: set failed for priority 4 Warning: support for elevated priorities is most likely unavailable, suppressing future warnings BuildCompleteAppOverviewChange: 153 RegisterForAppOverview 1: 82ms RegisterForAppOverview 2: 86ms [965580]Non-Steam Controller Configs Enabled: 1 Installing breakpad exception handler for appid(steam)/version(1626824053) Installing breakpad exception handler for appid(steam)/version(1626824053) GameAction [AppID 965580, ActionID 1] : LaunchApp changed task to ProcessingInstallScript with "" pressure-vessel-wrap[409]: E: Cannot run bwrap: wait status 256 pressure-vessel-wrap[409]: E: Diagnostic output: bwrap: Failed to make / slave: Operation not permitted GameAction [AppID 965580, ActionID 1] : LaunchApp changed task to SiteLicenseSeatCheckout with "" GameAction [AppID 965580, ActionID 1] : LaunchApp changed task to CreatingProcess with "" GameAction [AppID 965580, ActionID 1] : LaunchApp waiting for user response to CreatingProcess "" GameAction [AppID 965580, ActionID 1] : LaunchApp continues with user response "CreatingProcess" Opted-in Controller Mask for AppId 965580: 0 /bin/sh\0-c\0/home/rsruser/.local/share/Steam/ubuntu12_32/reaper SteamLaunch AppId=965580 -- '/home/rsruser/.local/share/Steam/steamapps/common/SteamLinuxRuntime_soldier'/_v2-entry-point --verb=waitforexitandrun -- '/home/rsruser/.local/share/Steam/compatibilitytools.d/Proton-6.12-GE-1'/proton waitforexitandrun '/home/rsruser/.local/share/Steam/steamapps/common/Root/Root.exe'\0 Game update: AppID 965580 "", ProcID 418, IP 0.0.0.0:0 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. Starting app 965580 >>> Adding process 418 for game ID 965580 GameAction [AppID 965580, ActionID 1] : LaunchApp changed task to WaitingGameWindow with "" ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_64/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS64): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. GameAction [AppID 965580, ActionID 1] : LaunchApp changed task to Completed with "" ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 419 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 420 for game ID 965580 >>> Adding process 425 for game ID 965580 pid 426 != 419, skipping destruction (fork without exec?) ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 427 for game ID 965580 ERROR: ld.so: object '/home/rsruser/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored. >>> Adding process 428 for game ID 965580 pressure-vessel-wrap[419]: E: Cannot run bwrap: wait status 256 pressure-vessel-wrap[419]: E: Diagnostic output: bwrap: Failed to make / slave: Operation not permitted Game removed: AppID 965580 "", ProcID 418 Uploaded AppInterfaceStats to Steam Exiting app 965580 No cached sticky mapping in ActivateActionSet.Installing breakpad exception handler for appid(steam)/version(1626824053) Installing breakpad exception handler for appid(steam)/version(1626824053) Exiting workitem thread (steam:182): GLib-GObject-CRITICAL **: 10:06:49.917: g_object_unref: assertion 'G_IS_OBJECT (object)' failed (steam:182): GLib-GObject-WARNING **: 10:06:49.918: invalid (NULL) pointer instance (steam:182): GLib-GObject-CRITICAL **: 10:06:49.918: g_signal_handlers_disconnect_matched: assertion 'G_TYPE_CHECK_INSTANCE (instance)' failed (steam:182): GLib-GObject-CRITICAL **: 10:06:49.919: g_object_unref: assertion 'G_IS_OBJECT (object)' failed [2021-07-28 10:06:49] Shutdown Parent is shutting down, bye... ```

EDIT by @rusty-snake: details-summary for terminal output

rusty-snake commented 3 years ago

I meant to do four testes, one for every seccomp... that I listed. Sorry if this wasn't clear. e.g. (1) Comment seccomp !ptrace and add seccomp !ptrace,!personality,!process_vm_readv (2) run firejail /usr/bin/steam and open Root, does it work yes/no (if no you can skip seccomp !ptrace,!process_vm_readv and seccomp !ptrace,!personality) (3) replace seccomp !ptrace,!personality,!process_vm_readv with seccomp.drop @default and go to step 2 and so on.

rsramkis commented 3 years ago

Thanks for your feedback. I had this feeling looking at the seccomp commands I had gotten the test wrong.

So something very interesting came up. I noticed that on Linux that the problem I originally identified changes when I run steam:

(1) From "Steam (runtime)" icon. --No extra configuration lines are needed in the steam.profile to run Steam Client and Steam games.

(2) Run 'firejail steam' from terminal (zsh configured) where Steam Client launches but not individual games. --For some reason the "allow-debugger" line does not work dependably from terminal. --all 'setcomp' lines were tested individually all all failed.

So .... as a QA I am quite puzzled why it is all working while running from the desktop program icon. Because this is how I was running it when I had issues starting a game.

Maybe the question is why are games failing when steam is launched from terminal?

Test Steps:

(1) Launch Allacritty to open the terminal.

(2) Prompt opens as ZSH.

(3) Launch steam 'steam'

(4) Steam client launches. The games start and stop (e.g. 'Roor').

rusty-snake commented 3 years ago
DoPlJoe commented 3 years ago

So adding allow-debuggers fixes it? If so, can you comment it and try to replace the seccomp command in steam.profile with

1. `seccomp !ptrace,!personality,!process_vm_readv`

2. `seccomp.drop @default`

3. `seccomp !ptrace,!process_vm_readv`

4. `seccomp !ptrace,!personality`

I have the same problem and none of the 4 lines solves it for me, it does work with "--ignore=seccomp". Going with the journal log, I get the following numbers: 349, 165, 155, 166 and 303 in the journal. Feeding those in debug-syscalls gives me nothing for 349 and then "mount", "pivot_root", "umount2", "name_to_handle_at" respectively.

For reference I was trying to run "Deus Ex: Human Revolution - Director's Cut", when I ran into the issue, but didn't get the issue with the 1/2 other proton titles I tried.

kmk3 commented 3 years ago

@DoPlJoe commented 7 minutes ago:

Going with the journal log, I get the following numbers: 349, 165, 155, 166 and 303 in the journal. Feeding those in debug-syscalls gives me nothing for 349 and then "mount", "pivot_root", "umount2", "name_to_handle_at" respectively.

$ firejail --debug-syscalls32 | grep 349
349     - kcmp

See also #3219.

DoPlJoe commented 3 years ago

@DoPlJoe commented 7 minutes ago:

Going with the journal log, I get the following numbers: 349, 165, 155, 166 and 303 in the journal. Feeding those in debug-syscalls gives me nothing for 349 and then "mount", "pivot_root", "umount2", "name_to_handle_at" respectively.

$ firejail --debug-syscalls32 | grep 349
349     - kcmp

See also #3219.

Should I add something to the profile or is this just as an addendum?

rusty-snake commented 3 years ago

You should exceptions to the profile. Which architecture have the logged syscalls? All i386 (arch=40000003)?

kmk3 commented 3 years ago

@DoPlJoe commented 7 minutes ago:

Going with the journal log, I get the following numbers: 349, 165, 155, 166 and 303 in the journal. Feeding those in debug-syscalls gives me nothing for 349 and then "mount", "pivot_root", "umount2", "name_to_handle_at" respectively.

$ firejail --debug-syscalls32 | grep 349
349     - kcmp

See also #3219.

Should I add something to the profile or is this just as an addendum?

It was an addendum to explain where 349 comes from / how to debug 32-bit syscalls.

I don't know about the other syscalls, but since #4375, kcmp shouldn't be blocked by default anymore. Which firejail version are you using?

DoPlJoe commented 3 years ago

I'm using Manjaro(Arch) and the official community package 0.9.66-1.

rsramkis commented 3 years ago
* Check which command is `Exec`uted by the desktop-file

* Always use `firejail /path/to/program` if you have a firecfg symlink for program

* Does the desktop-file really use firejail (check `firejail --list`)

Hi,

I use "sudo firecfg" to create the system links for the majority of the Gnome\Installed programs. So in the case of launching steam:

firejail --list
2032:rsruser::/usr/bin/firejail /usr/bin/firefox
11145:rsruser::/usr/bin/firejail /usr/bin/steam
rsramkis commented 3 years ago

Interestingly enough the issue came back today after I did an upgrade of the package to version "Steam 1.0.0.71-1". I ended up adding the line "ignore seccomp" to the steam.profile and I was back up and running.

So more steam behavior to figure out.

rsramkis commented 3 years ago

Closing this issue for now with the above configuration changes. Thank you,