[GH-ISSUE #2125] sysconfdir not configurable when --prefix=/usr #1441

Closed
opened 2026-05-05 08:06:23 -06:00 by gitea-mirror · 1 comment
Owner

Originally created by @daniel-ayers on GitHub (Sep 28, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2125

With ./configure --prefix=/usr --sysconfdir=/anything/at/all the setting of sysconfdir is ignored because for that case it is hard-coded in configure and not overridden when sysconfdir is specified:

# set sysconfdir                                                                                                                                                                                      
if test "$prefix" = /usr; then
        sysconfdir="/etc"
fi

This is OK if sysconfdir is not specified, but if the user sets it then the user's setting should be obeyed.

Originally created by @daniel-ayers on GitHub (Sep 28, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/2125 With `./configure --prefix=/usr --sysconfdir=/anything/at/all` the setting of sysconfdir is ignored because for that case it is hard-coded in configure and not overridden when sysconfdir is specified: ``` # set sysconfdir if test "$prefix" = /usr; then sysconfdir="/etc" fi ``` This is OK if sysconfdir is not specified, but if the user sets it then the user's setting should be obeyed.
gitea-mirror 2026-05-05 08:06:23 -06:00
  • closed this issue
  • added the
    bug
    label
Author
Owner

@daniel-ayers commented on GitHub (Sep 28, 2018):

This breaks firejail under Qubes OS because modifications to /etc do not persist across reboots (by design). In Qubes it is desirable to locate binaries/libs/etc in the (RO) root partition so they cannot be modified/backdoored/etc (even by root); but the configs need to be in /usr/local/etc which is RW.

<!-- gh-comment-id:425594172 --> @daniel-ayers commented on GitHub (Sep 28, 2018): This breaks firejail under Qubes OS because modifications to /etc do not persist across reboots (by design). In Qubes it is desirable to locate binaries/libs/etc in the (RO) root partition so they cannot be modified/backdoored/etc (even by root); but the configs need to be in /usr/local/etc which is RW.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1441
No description provided.