[GH-ISSUE #1719] whitelisting subpath of blacklisted path #1161

Closed
opened 2026-05-05 07:33:55 -06:00 by gitea-mirror · 5 comments
Owner

Originally created by @ghost on GitHub (Jan 8, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1719

firejail 0.9.52

Using firefox with the default profile.
In /etc/firefox.local:

noblacklist /mnt/stuff
blacklist /mnt

or also:

noblacklist /mnt/stuff
blacklist /mnt
whitelist /mnt/stuff

Neither works. Am I doing something wrong or is it not possible?

Originally created by @ghost on GitHub (Jan 8, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/1719 firejail 0.9.52 Using firefox with the default profile. In /etc/firefox.local: ``` noblacklist /mnt/stuff blacklist /mnt ``` or also: ``` noblacklist /mnt/stuff blacklist /mnt whitelist /mnt/stuff ``` Neither works. Am I doing something wrong or is it not possible?
Author
Owner

@chiraag-nataraj commented on GitHub (Jan 8, 2018):

You should be able to achieve what you want just by whitelist - that is, whitelist /mnt/stuff means that only that subfolder will be available. Or are you trying to do something else?

<!-- gh-comment-id:355982156 --> @chiraag-nataraj commented on GitHub (Jan 8, 2018): You should be able to achieve what you want just by `whitelist` - that is, `whitelist /mnt/stuff` means that only that subfolder will be available. Or are you trying to do something else?
Author
Owner

@ghost commented on GitHub (Jan 8, 2018):

yes, that's what I'm trying to do. But your suggestion doesn't work either (I can now access /mnt itself, but it's empty). Maybe a bug?

<!-- gh-comment-id:355984973 --> @ghost commented on GitHub (Jan 8, 2018): yes, that's what I'm trying to do. But your suggestion doesn't work either (I can now access /mnt itself, but it's empty). Maybe a bug?
Author
Owner

@chiraag-nataraj commented on GitHub (Jan 8, 2018):

That's probably because there's a disable-mnt in the default profile, so you'll want to do a ignore disable-mnt in your firefox.local.

<!-- gh-comment-id:355990418 --> @chiraag-nataraj commented on GitHub (Jan 8, 2018): That's probably because there's a `disable-mnt` in the default profile, so you'll want to do a `ignore disable-mnt` in your `firefox.local`.
Author
Owner

@ghost commented on GitHub (Jan 8, 2018):

thank'you! now it works well

<!-- gh-comment-id:356001124 --> @ghost commented on GitHub (Jan 8, 2018): thank'you! now it works well
Author
Owner

@chiraag-nataraj commented on GitHub (Jan 8, 2018):

No problem! 🙂

<!-- gh-comment-id:356002891 --> @chiraag-nataraj commented on GitHub (Jan 8, 2018): No problem! :slightly_smiling_face:
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1161
No description provided.