mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #2411] How to allow kate to edit files in .config ? #1606
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#1606
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Utini2000 on GitHub (Feb 17, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2411
Hello everyone,
I can't figure out how to allow "kate" to edit files in /home/user/.config/ ?
I already allowed the folder itself but every file I open will be run as an empty "new file" in kate although it's an existing file with content.
Thanks in advance!
@rusty-snake commented on GitHub (Feb 17, 2019):
You can run kate without firejail for something like that:
/bin/kateor/usr/bin/katedepending on your distro.or by
noblacklisting everything in .config:firejail --noblacklist="${HOME}/.config/*" kate@Utini2000 commented on GitHub (Feb 17, 2019):
Already did noblacklist everything but it still doesnt work :S
@rusty-snake commented on GitHub (Feb 17, 2019):
@Utini2000 With or without the
${HOME}.Don't work:
firejail --noblacklist=".config/*" kateShould work:
firejail --noblacklist="${HOME}/.config/*" kate@Utini2000 commented on GitHub (Feb 17, 2019):
In my kate.local
noblacklist ${HOME}/.config/*
When I open some in .config it is just an empty file and kate says "New file".
When running kate with your command I get "permission denied" when opening e.g. ./config/firejail/
@rusty-snake commented on GitHub (Feb 17, 2019):
Maybe .config/firejail is special.
@Utini2000 commented on GitHub (Feb 17, 2019):
Lol that is weird,
The folder for firejail,mpv,vlc in /.config/... wont work.
cantana for example does work.
@Vincent43 commented on GitHub (Feb 17, 2019):
.config/firejailwill be always blacklisted in firejail. For others you have to disableinclude disable-common.inc,include disable-passwdmgr.incandinclude disable-programs.incinkate.profile.@chiraag-nataraj commented on GitHub (Feb 17, 2019):
@Utini2000 So I've actually run into this issue because I sandbox
emacs(my editor of choice). My personal favorite solution has been to whitelist a specific directory (in my case,~/.config/emacs/emacs_tmp) and write a wrapper script which hardlinks the file into that directory, opensemacsfor editing the file, and deletes the hardlink when I close the file. It's definitely a kludgy solution, but has the advantage that I can, for example, even edit firejail profiles inemacsusing this method even ifemacsis jailed.I'd also like to note that my
emacsprofile is a whitelist profile which only whitelists${DOCUMENTS}and${DOWNLOADS}, which means I need the script to edit any file outside of those directories (aka config files, scripts in~/.local/bin, etc).@Utini2000 commented on GitHub (Feb 18, 2019):
Hmm but what is the logic behind disabling the whole .config folder for kate but not for other editors e.g. nano?
@rusty-snake commented on GitHub (Feb 18, 2019):
@Utini2000 look here.
or with words: nano doesn't have a firejail profile.
@Utini2000 commented on GitHub (Feb 18, 2019):
Link doesnt work.
But if nano doesn't have a profile, why does kate? :D
@rusty-snake commented on GitHub (Feb 18, 2019):
@Utini2000 the broken link was intentional, otherwise you would find there the nano-profile there.
Because someone has writte a profile for kate, but nobody for nano. ;)
@Vincent43 commented on GitHub (Feb 18, 2019):
Some time ago I proposed relaxed config for app like kate or dolphin but the consensus was against this change: https://github.com/netblue30/firejail/pull/1806
@Utini2000 commented on GitHub (Feb 18, 2019):
Its not just about beeing relaxed, its about beeing unmatching between apps of the same type.
Kate and nano are both very common text editors. One is handled so strict that is basically cripples th usage of the app while the other one isn't handlet by firejail at all.
@Vincent43 commented on GitHub (Feb 18, 2019):
We have dedicated issue for requesting new profiles. You can also create new profile yourself. Creating app profiles is a collaborative work, everyone can contribute to it. We add many new profiles in each release but you can't expect that we provide a profile for every app in universe.
@ghost commented on GitHub (Feb 19, 2019):
just copy the kate.profile to home .config/firejail/ and comment the superfluous lines, the kate profile and some other are too restricted
@Utini2000 commented on GitHub (Feb 19, 2019):
Oh so the .profile in .config/firejail overwrites the .profile in /etc/firejail?
And the .local simply adds stuff to the .profile of /etc/firejail?
Ye I guess I will do that and check every now and then if the kate/nano profiles were updated :)
I dont want to give them too much access,just enough to also edit config files in .config
@rusty-snake commented on GitHub (Feb 19, 2019):
@Utini2000 #2422
@chiraag-nataraj commented on GitHub (May 20, 2019):
So we have a nano profile now and the original question has been aswered with several workarounds. I'm going to go ahead and close this, but @Utini2000, feel free to reopen if you have more questions.