github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #1858] advice for scripted w3m #1258

New issue

Closed

opened 2026-05-05 07:44:25 -06:00 by gitea-mirror · 4 comments

gitea-mirror commented

2026-05-05 07:44:25 -06:00

Owner

Originally created by @ghost on GitHub (Apr 4, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1858

I use pacolog to see changelogs of updated packages in Arch. It's a bash script that uses w3m -dump to retrieve data from archlinux.org, but with its firejail profile enabled it stops with "unable to get local issuer certificate: accept? (y/n)", which in turn makes the pacolog script freeze.

It's such an obscure case that I don't think it's worth "fixing", but I'd like to ask how to patch my local w3m profile as I don't want to disable it.

Originally created by @ghost on GitHub (Apr 4, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/1858 I use [pacolog](https://github.com/protist/pacolog) to see changelogs of updated packages in Arch. It's a bash script that uses w3m -dump to retrieve data from archlinux.org, but with its firejail profile enabled it stops with "unable to get local issuer certificate: accept? (y/n)", which in turn makes the pacolog script freeze. It's such an obscure case that I don't think it's worth "fixing", but I'd like to ask how to patch my local w3m profile as I don't want to disable it.

gitea-mirror closed this issue

2026-05-05 07:44:26 -06:00

gitea-mirror commented

2026-05-05 07:44:28 -06:00

Author

Owner

@Vincent43 commented on GitHub (Apr 4, 2018):

You may try commenting out various things in w3m profile to find which one creates problems (it may be private-etc or disable-common.inc).

You can also try running firejail --build=pacolog.profile pacolog <something> and see what it detected. After that you may even copy pacolog.profile to ~/.config/firejail/ and create link with sudo ln -s /usr/bin/firejail /usr/local/bin/pacolog (assuming pacolog script is installed in /usr/bin/pacolog. This way pacolog will use its own firejail profile instead of w3m which could stay untouched.

@Vincent43 commented on GitHub (Apr 4, 2018): You may try commenting out various things in [w3m profile](https://github.com/netblue30/firejail/blob/master/etc/w3m.profile) to find which one creates problems (it may be `private-etc` or `disable-common.inc`). You can also try running `firejail --build=pacolog.profile pacolog <something>` and see what it detected. After that you may even copy `pacolog.profile` to `~/.config/firejail/` and create link with `sudo ln -s /usr/bin/firejail /usr/local/bin/pacolog` (assuming pacolog script is installed in `/usr/bin/pacolog`. This way pacolog will use its own firejail profile instead of w3m which could stay untouched.

gitea-mirror commented

2026-05-05 07:44:30 -06:00

Author

Owner

@ghost commented on GitHub (Apr 4, 2018):

Using firejail with the build option returns:
2:strace:exec /usr/bin/strace:0
2:strace:fopen64 /tmp/firejail-strace:0x5613f6409320
/usr/bin/strace: ptrace(PTRACE_TRACEME, ...): Operation not permitted

Creating a profile for pacolog doesn't seem to solve the issue.

Finally I commented out private-etc in w3m.profile and now it works. Thank you.

@ghost commented on GitHub (Apr 4, 2018): Using firejail with the build option returns: 2:strace:exec /usr/bin/strace:0 2:strace:fopen64 /tmp/firejail-strace:0x5613f6409320 /usr/bin/strace: ptrace(PTRACE_TRACEME, ...): Operation not permitted Creating a profile for pacolog doesn't seem to solve the issue. Finally I commented out private-etc in w3m.profile and now it works. Thank you.

gitea-mirror commented

2026-05-05 07:44:32 -06:00

Author

Owner

@Vincent43 commented on GitHub (Apr 4, 2018):

@bryce-lynch
You can create /etc/firejail/w3m.local and add line ignore private-etc inside. This way your customization's won't be overwritten during firejail update.

@Vincent43 commented on GitHub (Apr 4, 2018): @bryce-lynch You can create `/etc/firejail/w3m.local` and add line `ignore private-etc` inside. This way your customization's won't be overwritten during firejail update.

gitea-mirror commented

2026-05-05 07:44:33 -06:00

Author

Owner

@ghost commented on GitHub (Apr 4, 2018):

@Vincent43 Thanks!

@ghost commented on GitHub (Apr 4, 2018): @Vincent43 Thanks!

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1258

No description provided.

Rows
Columns