rusty-snake
commented
2 years ago Is there some order to commenting out syscalls
No (for only one seccomp ... line).
does --debug-syscalls report the wrong syscall?
No, just lookup the right architecture. (40000003 is i386)
Or perhaps the syscall actually causing the issue isn't getting reported and I have to try them all?
Make sure to run with seccomp-error-action kill or seccomp-error-action log or have your kernel/audit configured to log errnos too.
seccomp !chroot,!mount,!name_to_handle_at,!pivot_root,!ptrace,!umount2,!msync,!unshare,!process_vm_readv
Is your firejail/kernel a x86_64 build? Did you tried with seccomp.32 as well?
kmk3
swimik
Environment
Description
Fallout 76 worked previously but
ignore seccompwas set due to previous issues with steam and proton Runningfirejail --noprofile steamand then launching the game does work. Addingignore seccompto steam.local works again Firejail-profiles is installedThere seems to be a fault with firejail preventing wine from executing a 64 bit instruction causing the game to crash. This is the only game I have encountered this with.
Here is the sequence just before the error, and the error:
firejail steam
``` Game process updated : AppID 1151340 "/home/user/.local/share/Steam/ubuntu12_32/reaper SteamLaunch AppId=1151340 -- '/home/user/.local/share/Steam/steamapps/common/SteamLinuxRuntime_soldier'/_v2-entry-point --verb=waitforexitandrun -- '/home/user/.local/share/Steam/steamapps/common/Proton - Experimental'/proton waitforexitandrun '/home/user/.local/share/Steam/steamapps/common/Fallout76/Fallout76.exe'", ProcID 855, IP 0.0.0.0:0 Setting breakpad minidump AppID = 1151340 Steam_SetMinidumpSteamID: Caching Steam ID: 76561198014067822 [API loaded no] WARNING: radv is not a conformant Vulkan implementation, testing use only. WARNING: radv is not a conformant Vulkan implementation, testing use only. **wine: Unhandled illegal instruction at address 0000000141ECE6E0 (thread 0140), starting debugger... Unhandled exception: illegal instruction in 64-bit code (0x0000000141ece6e0).** Register dump: rip:0000000141ece6e0 rsp:000000000011fec8 rbp:00000003af6f3ce0 eflags:00010202 ( R- -- I - - - ) rax:0000000007480390 rbx:0000000143b11538 rcx:11da19262e780000 rdx:00000000000 00000 rsi:00000003af6f3ce0 rdi:0000000143b71580 r8:000000000017f9d0 r9:00000000000 00000 r10:0000000000000008 r11:000000000011fe70 r12:00000003af6f9d98 r13:00000003af6f9c7f r14:00000000000 00000 r15:0000000000000000 Stack dump: 0x000000000011fec8: *** Invalid address 0x000000000011fec8 *** Backtrace: =>0 0x0000000141ece6e0 in fallout76 (+0x1ece6e0) (0x00000003af6f3ce0) 0x0000000141ece6e0 fallout76+0x1ece6e0: -- no code accessible -- Modules: Module Address Debug info Name (89 module s) PE 0000000000690000-00000000006cb000 Deferred ortp_x64 PE 00000000006d0000-00000000006d9000 Deferred x3daudio1_7 PE 00000000006e0000-000000000075b000 Deferred bink2w64 PE 0000000000760000-00000000007fe000 Deferred msvcp140 PE 0000000000800000-0000000000817000 Deferred vcruntime140 PE 0000000000820000-00000000063de000 Deferred libcef PE 00000000063e0000-0000000006474000 Deferred chrome_elf PE 000000007b000000-000000007b0d9000 Deferred kernelbase PE 000000007b600000-000000007b812000 Deferred kernel32 PE 0000000140000000-0000000147178000 Export fallout76 PE 0000000170000000-00000001700a1000 Deferred ntdll PE 0000000180000000-00000001805a6000 Deferred vivoxsdk_x64 PE 00000001c4ee0000-00000001c4f10000 Deferred winspool PE 00000001c69e0000-00000001c72fc000 Deferred shell32 PE 00000001c8b40000-00000001c8b60000 Deferred msacm32 PE 00000001c8db0000-00000001c8e47000 Deferred msvcrt PE 00000001cd860000-00000001cd868000 Deferred api-ms-win-crt- utility-l1-1-0 PE 00000001cfdf0000-00000001cfe13000 Deferred dxva2 PE 00000001d97a0000-00000001d97a7000 Deferred api-ms-win-core -fibers-l1-1-1 PE 00000001dd3f0000-00000001dd4bd000 Deferred crypt32 PE 00000001ec2b0000-00000001ec2d6000 Deferred ws2_32 PE 00000001f51e0000-00000001f51f0000 Deferred hid PE 00000001fdfd0000-00000001fdff8000 Deferred wintrust PE 0000000201cf0000-0000000201d0f000 Deferred secur32 PE 000000021a7e0000-000000021a855000 Deferred setupapi PE 0000000226310000-0000000226317000 Deferred api-ms-win-core -string-l1-1-0 PE 0000000231ae0000-0000000231b62000 Deferred rpcrt4 PE 000000023d820000-000000023da6e000 Deferred user32 PE 0000000240030000-000000024005d000 Deferred iphlpapi PE 0000000241850000-0000000241857000 Deferred api-ms-win-crt- environment-l1-1-0 PE 000000024f470000-000000024f48f000 Deferred mpr PE 00000002522e0000-0000000252324000 Deferred oleacc PE 0000000253cc0000-0000000253cde000 Deferred xinput1_3 PE 000000025d740000-000000025d74e000 Deferred dwmapi PE 0000000262250000-0000000262259000 Deferred api-ms-win-crt- runtime-l1-1-0 PE 000000026b4c0000-000000026b53a000 Deferred gdi32 PE 0000000270f60000-0000000271223000 Deferred d3d9 PE 00000002739c0000-0000000273af7000 Deferred oleaut32 PE 0000000274a50000-0000000274a5d000 Deferred kerberos PE 000000028ba60000-000000028ba67000 Deferred api-ms-win-crt- time-l1-1-0 PE 000000028dfa0000-000000028dfac000 Deferred nsi PE 000000029cfc0000-000000029cfd6000 Deferred dnsapi PE 000000029ea80000-000000029ea87000 Deferred api-ms-win-core -datetime-l1-1-1 PE 00000002a4090000-00000002a409e000 Deferred wtsapi32 PE 00000002a9540000-00000002a9548000 Deferred usp10 PE 00000002bb750000-00000002bb894000 Deferred comctl32 PE 00000002d4d40000-00000002d4d57000 Deferred bcrypt PE 00000002e3540000-00000002e3591000 Deferred shlwapi PE 00000002e8f10000-00000002e902a000 Deferred ole32 PE 00000002edf00000-00000002ee0f0000 Deferred dxgi PE 00000002f1fa0000-00000002f1fae000 Deferred version PE 00000002fa030000-00000002fa037000 Deferred api-ms-win-core -localization-obsolete-l1-2-0 PE 00000002fe110000-00000002fe11a000 Deferred api-ms-win-crt- multibyte-l1-1-0 PE 000000030a2c0000-000000030a2c9000 Deferred api-ms-win-crt- stdio-l1-1-0 PE 000000030a950000-000000030a9c2000 Deferred dwrite PE 000000030c980000-000000030c988000 Deferred api-ms-win-core -synch-l1-2-0 PE 00000003126f0000-0000000312709000 Deferred shcore PE 0000000316370000-000000031637b000 Deferred psapi PE 000000031f800000-000000031f8ff000 Deferred comdlg32 PE 0000000327020000-0000000327073000 Deferred combase PE 000000032a700000-000000032a72a000 Deferred sechost PE 000000032ead0000-000000032eadc000 Deferred sensapi PE 0000000330260000-00000003302a0000 Deferred advapi32 PE 000000033ea00000-000000033ea09000 Deferred api-ms-win-crt- string-l1-1-0 PE 00000003422e0000-000000034237c000 Deferred urlmon PE 0000000344840000-0000000344848000 Deferred api-ms-win-crt- filesystem-l1-1-0 PE 0000000346ba0000-0000000346bc1000 Deferred jsproxy PE 0000000350a30000-0000000350a39000 Deferred api-ms-win-crt- convert-l1-1-0 PE 0000000351680000-0000000351688000 Deferred api-ms-win-core -localization-l1-2-1 PE 0000000355100000-0000000355107000 Deferred api-ms-win-crt- locale-l1-1-0 PE 0000000358120000-0000000358166000 Deferred winhttp PE 0000000359050000-0000000359335000 Deferred d3d11 PE 0000000360a80000-0000000360a8a000 Deferred api-ms-win-crt- math-l1-1-0 PE 00000003673d0000-00000003673f8000 Deferred netapi32 PE 0000000375610000-0000000375648000 Deferred win32u PE 00000003785e0000-00000003785ed000 Deferred vulkan-1 PE 0000000388e20000-0000000388e2e000 Deferred userenv PE 000000038b5a0000-000000038b5f2000 Deferred wldap32 PE 000000039b510000-000000039b518000 Deferred api-ms-win-crt- heap-l1-1-0 PE 00000003a0440000-00000003a04c3000 Deferred wininet PE 00000003a19e0000-00000003a19ef000 Deferred ncrypt PE 00000003aa4c0000-00000003aa4cc000 Deferred dhcpcsvc PE 00000003af670000-00000003af730000 Deferred ucrtbase PE 00000003afd00000-00000003afd1a000 Deferred imm32 PE 00000003b6dc0000-00000003b6de5000 Deferred winevulkan PE 00000003b8f00000-00000003b8fc1000 Deferred winmm PE 00000003bb250000-00000003bb358000 Deferred cryptui PE 00000003be590000-00000003be5f3000 Deferred dbghelp PE 00007fc8b3310000-00007fc8b3314000 Deferred winex11 Threads: process tid prio (all id:s are in hex) 00000020 steam.exe 00000024 0 000000c8 0 00000148 0 00000030 services.exe 00000034 0 00000038 0 00000044 0 00000048 0 00000054 0 00000068 0 00000074 0 00000098 0 000000b0 0 000000fc 0 00000100 0 00000104 0 0000003c winedevice.exe 00000040 0 0000004c 0 00000050 0 00000058 0 0000005c 0 000000bc 0 00000060 winedevice.exe 00000064 0 0000006c 0 00000070 0 00000078 0 0000007c 0 00000080 0 00000084 0 0000008c 0 00000090 plugplay.exe 00000094 0 0000009c 0 000000a0 0 000000a4 0 000000a8 svchost.exe 000000ac 0 000000b4 0 000000b8 0 000000c0 conhost.exe 000000c4 0 000000cc explorer.exe 000000d0 0 000000e0 0 000000e4 0 000000ec rpcss.exe 000000f0 0 00000108 0 0000010c 0 00000110 0 00000114 0 00000118 0 0000011c 0 00000124 tabtip.exe 00000128 0 00000138 0 00000144 0 0000013c (D) Z:\home\user\.local\share\Steam\steamapps\common\Fallout76\Fall out76.exe 00000140 0 <== 00000154 0 System information: Wine build: wine-7.0 Platform: x86_64 Version: Windows 10 Host system: Linux Host version: 5.15.0-2-amd64 ThreadGetProcessExitCode: no such process 938 ThreadGetProcessExitCode: no such process 933 ThreadGetProcessExitCode: no such process 912 ThreadGetProcessExitCode: no such process 898 ThreadGetProcessExitCode: no such process 892 ThreadGetProcessExitCode: no such process 886 ThreadGetProcessExitCode: no such process 864 ThreadGetProcessExitCode: no such process 861 ThreadGetProcessExitCode: no such process 851 pid 857 != 856, skipping destruction (fork without exec?) Game process removed: AppID 1151340 "/home/user/.local/share/Steam/ubuntu12_32/reaper SteamLaunch AppId=1151340 -- '/home/user/.local/share/Steam/steamapps/common/SteamLinuxRuntime_soldier'/_v2-entry-point --verb=waitforexitandrun -- '/home/user/.local/share/Steam/steamapps/common/Proton - Experimental'/proton waitforexitandrun '/home/user/.local/share/Steam/steamapps/common/Fallout76/Fallout76.exe'", ProcID 855 ThreadGetProcessExitCode: no such process 873 ThreadGetProcessExitCode: no such process 855 ThreadGetProcessExitCode: no such process 745 ThreadGetProcessExitCode: no such process 744 Game 1151340 created interface STEAMAPPLIST_INTERFACE_VERSION001 / AppList Game 1151340 created interface STEAMAPPS_INTERFACE_VERSION008 / Apps Game 1151340 created interface STEAMHTMLSURFACE_INTERFACE_VERSION_004 / HTMLSurface Game 1151340 created interface STEAMHTTP_INTERFACE_VERSION002 / HTTP Game 1151340 created interface STEAMINVENTORY_INTERFACE_V002 / Inventory Game 1151340 created interface STEAMMUSICREMOTE_INTERFACE_VERSION001 / MusicRemote Game 1151340 created interface STEAMMUSIC_INTERFACE_VERSION001 / Music Game 1151340 created interface STEAMPARENTALSETTINGS_INTERFACE_VERSION001 / ParentalSettings Game 1151340 created interface STEAMREMOTESTORAGE_INTERFACE_VERSION014 / RemoteStorage Game 1151340 created interface STEAMSCREENSHOTS_INTERFACE_VERSION003 / Screenshots Game 1151340 created interface STEAMUGC_INTERFACE_VERSION010 / UGC Game 1151340 created interface STEAMUSERSTATS_INTERFACE_VERSION011 / UserStats Game 1151340 created interface STEAMVIDEO_INTERFACE_V002 / Video Game 1151340 created interface SteamController006 / Controller Game 1151340 created interface SteamFriends015 / Friends Game 1151340 created interface SteamMatchMaking009 / Matchmaking Game 1151340 created interface SteamMatchMakingServers002 / MatchmakingServers Game 1151340 created interface SteamNetworking005 / Networking Game 1151340 created interface SteamUser019 / User Game 1151340 created interface SteamUtils009 / Utils Game 1151340 method call count for IClientAppManager::GetAppInstallState : 2 Game 1151340 method call count for IClientUtils::RecordSteamInterfaceCreation : 22 Game 1151340 method call count for IClientUtils::GetSteamUILanguage : 1 Game 1151340 method call count for IClientUtils::GetAppID : 24 Game 1151340 method call count for IClientUser::GetSteamID : 1 Uploaded AppInterfaceStats to Steam Installing breakpad exception handler for appid(steam)/version(1654574690) Installing breakpad exception handler for appid(steam)/version(1654574690) ```
Here is it running fine with
firejail --noprofilestarting at the same point:firejail --noprofile steam
``` Game process updated : AppID 1151340 "/home/user/.local/share/Steam/ubuntu12_32/reaper SteamLaunch AppId=1151340 -- '/home/user/.local/share/Steam/steamapps/common/SteamLinuxRuntime_soldier'/_v2-entry-point --verb=waitforexitandrun -- '/home/user/.local/share/Steam/steamapps/common/Proton - Experimental'/proton waitforexitandrun '/home/user/.local/share/Steam/steamapps/common/Fallout76/Fallout76.exe'", ProcID 927, IP 0.0.0.0:0 Setting breakpad minidump AppID = 1151340 Steam_SetMinidumpSteamID: Caching Steam ID: 76561198014067822 [API loaded no] WARNING: radv is not a conformant Vulkan implementation, testing use only. Fossilize INFO: Overriding serialization path: "/home/user/.local/share/Steam/steamapps/shadercache/1151340/fozpipelinesv6/steamapprun_pipeline_cache". WARNING: radv is not a conformant Vulkan implementation, testing use only. WARNING: radv is not a conformant Vulkan implementation, testing use only. WARNING: radv is not a conformant Vulkan implementation, testing use only. WARNING: radv is not a conformant Vulkan implementation, testing use only. WARNING: radv is not a conformant Vulkan implementation, testing use only. WARNING: radv is not a conformant Vulkan implementation, testing use only. WARNING: radv is not a conformant Vulkan implementation, testing use only. WARNING: radv is not a conformant Vulkan implementation, testing use only. Installing breakpad exception handler for appid(gameoverlayui)/version(20220607031826) Installing breakpad exception handler for appid(gameoverlayui)/version(1.0) Installing breakpad exception handler for appid(gameoverlayui)/version(1.0) Installing breakpad exception handler for appid(gameoverlayui)/version(1.0) Installing breakpad exception handler for appid(steam)/version(1654574690) Installing breakpad exception handler for appid(steam)/version(1654574690) ThreadGetProcessExitCode: no such process 894 ThreadGetProcessExitCode: no such process 907 ThreadGetProcessExitCode: no such process 888 ThreadGetProcessExitCode: no such process 882 ThreadGetProcessExitCode: no such process 860 ThreadGetProcessExitCode: no such process 857 ThreadGetProcessExitCode: no such process 851 ThreadGetProcessExitCode: no such process 847 pid 853 != 852, skipping destruction (fork without exec?) Game process removed: AppID 1151340 "/home/user/.local/share/Steam/ubuntu12_32/reaper SteamLaunch AppId=1151340 -- '/home/user/.local/share/Steam/steamapps/common/SteamLinuxRuntime_soldier'/_v2-entry-point --verb=waitforexitandrun -- '/home/user/.local/share/Steam/steamapps/common/Proton - Experimental'/proton waitforexitandrun '/home/user/.local/share/Steam/steamapps/common/Fallout76/Fallout76.exe'", ProcID 927 ThreadGetProcessExitCode: no such process 927 ThreadGetProcessExitCode: no such process 869 ThreadGetProcessExitCode: no such process 741 ThreadGetProcessExitCode: no such process 740 Game 1151340 created interface SteamController007 / Controller Game 1151340 created interface SteamInput001 / Controller Game 1151340 created interface SteamUser020 / Game 1151340 created interface SteamUser020 / User Game 1151340 created interface SteamUtils009 / Utils Game 1151340 method call count for IClientUtils::RecordSteamInterfaceCreation : 6 Game 1151340 method call count for IClientUtils::GetAPICallResult : 1 Game 1151340 method call count for IClientUtils::GetAppID : 8 Game 1151340 method call count for IClientUser::GetEncryptedAppTicket : 1 Game 1151340 method call count for IClientUser::RequestEncryptedAppTicket : 1 Game 1151340 method call count for IClientUser::GetSteamID : 1 Uploaded AppInterfaceStats to Steam (process:1031): GLib-GObject-CRITICAL **: 04:14:39.645: g_object_unref: assertion 'G_IS_OBJECT (object)' failed src/steamexe/main.cpp (253) : Assertion Failed: reaping pid: 1031 -- gameoverlayui src/steamexe/main.cpp (253) : Assertion Failed: reaping pid: 1031 -- gameoverlayui Installing breakpad exception handler for appid(steam)/version(1654574690) assert_20220712041449_35.dmp[1083]: Uploading dump (out-of-process) /tmp/dumps/assert_20220712041449_35.dmp assert_20220712041449_35.dmp[1083]: Finished uploading minidump (out-of-process): success = yes assert_20220712041449_35.dmp[1083]: response: CrashID=bp-3a3b4cb5-60b7-4fb2-97f7-540312220712 assert_20220712041449_35.dmp[1083]: file ''/tmp/dumps/assert_20220712041449_35.dmp'', upload yes: ''CrashID=bp-3a3b4cb5-60b7-4fb2-97f7-540312220712'' Installing breakpad exception handler for appid(steam)/version(1654574690) Installing breakpad exception handler for appid(steam)/version(1654574690) [2022-07-12 17:22:50] Background update loop checking for update. . . [2022-07-12 17:22:50] Checking for available updates... [2022-07-12 17:22:50] Downloading manifest: https://cdn.akamai.steamstatic.com/client/steam_client_ubuntu12 [2022-07-12 17:22:50] Manifest download: send request [2022-07-12 17:22:51] Manifest download: waiting for download to finish [2022-07-12 17:22:51] Manifest download: finished [2022-07-12 17:22:51] Download failed: http error 0 (cdn.akamai.steamstatic.com/client/steam_client_ubuntu12) [2022-07-12 17:22:51] Downloading manifest: https://cdn.cloudflare.steamstatic.com/client/steam_client_ubuntu12 [2022-07-12 17:22:51] Manifest download: send request [2022-07-12 17:22:51] Manifest download: waiting for download to finish [2022-07-12 17:22:51] Manifest download: finished [2022-07-12 17:22:51] Download failed: http error 0 (cdn.cloudflare.steamstatic.com/client/steam_client_ubuntu12) [2022-07-12 17:22:51] Downloading manifest: http://media.steampowered.com/client/steam_client_ubuntu12 [2022-07-12 17:22:51] Manifest download: send request [2022-07-12 17:22:51] Manifest download: waiting for download to finish [2022-07-12 17:22:51] Manifest download: finished [2022-07-12 17:22:51] Download failed: http error 0 (media.steampowered.com/client/steam_client_ubuntu12) [2022-07-12 17:22:51] DownloadManifest - exhausted list of download hosts [2022-07-12 17:22:51] failed to load manifest from buffer. [2022-07-12 17:22:51] Failed to load manifest [2022-07-12 17:22:51] Error: Download failed: http error 0 [2022-07-12 17:22:51] Saving metrics to disk (/home/user/.local/share/Steam/package/steam_client_metrics.bin) [2022-07-12 17:27:14] Error: Failed to determine download location for universe 1 Could not connect to X session manager: None of the authentication protocols specified are supported Could not connect to X session manager: None of the authentication protocols specified are supported (steam:203): GLib-GObject-CRITICAL **: 17:29:10.737: g_object_unref: assertion 'G_IS_OBJECT (object)' failed (steam:203): GLib-GObject-WARNING **: 17:29:10.737: invalid (NULL) pointer instance (steam:203): GLib-GObject-CRITICAL **: 17:29:10.737: g_signal_handlers_disconnect_matched: assertion 'G_TYPE_CHECK_INSTANCE (instance)' failed (steam:203): GLib-GObject-CRITICAL **: 17:29:10.737: g_object_unref: assertion 'G_IS_OBJECT (object)' failed [2022-07-12 17:29:10] Shutdown Parent is shutting down, bye... ```
Steam is 32bit and installs its own Wine version(which I presume is 32 bit). My machine does not have its own local install of wine. I know for a fact many games I play are 64 bit so its a bit odd it wont run this 64 bit command.
I see two syscalls printing in syslog, 310 gets reported for two different programs, 26 seems to occur all the time and cause no issue in steam
Looking up these syscalls with
firejail --debug-syscallsI get26 = msync, or ptrace in syscalls32 310 = process_vm_readv, or unshare in syscalls32
!ptracehas already been added to steam.profile, adding any of the other three seems to have no effect. Either one at a time or adding all threeIs there some order to commenting out syscalls or does
--debug-syscallsreport the wrong syscall? Or perhaps the syscall actually causing the issue isn't getting reported and I have to try them all?