[GH-ISSUE #2743] Print better error in the case of ownership issues #1723

Closed
opened 2026-05-05 08:23:29 -06:00 by gitea-mirror · 3 comments
Owner

Originally created by @chiraag-nataraj on GitHub (Jun 3, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2743

If I use private-bin to whitelist a binary in /usr/bin which happens to have the wrong owner (for example, my user), firejail prints a very opaque and unhelpful error. The context this came up in is protonmail-bridge, which (for some godforsaken reason) installed with my user as the owner (going to report that as a bug to them). This meant that private-bin failed (as it should), but the error message was unhelpful in figuring out what the problem was.

Originally created by @chiraag-nataraj on GitHub (Jun 3, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/2743 If I use `private-bin` to whitelist a binary in `/usr/bin` which happens to have the wrong owner (for example, my user), `firejail` prints a very opaque and unhelpful error. The context this came up in is `protonmail-bridge`, which (for some godforsaken reason) installed with _my user_ as the owner (going to report that as a bug to them). This meant that `private-bin` failed (as it should), but the error message was unhelpful in figuring out what the problem was.
gitea-mirror 2026-05-05 08:23:29 -06:00
Author
Owner

@rusty-snake commented on GitHub (Jun 3, 2019):

If we want to print better error messages, we can also fix this:

$ firejail --name  # Invalid because it need =NAME
Error: invalid --name command line option
$ firejail --doesnt_exists # Invalid because it doesn't exists
Error: invalid --doesnt_exists command line option
<!-- gh-comment-id:498224863 --> @rusty-snake commented on GitHub (Jun 3, 2019): If we want to print better error messages, we can also fix this: ``` $ firejail --name # Invalid because it need =NAME Error: invalid --name command line option $ firejail --doesnt_exists # Invalid because it doesn't exists Error: invalid --doesnt_exists command line option ```
Author
Owner

@rusty-snake commented on GitHub (Jan 5, 2020):

or this (--quiet and --debug):

$ firejail --quiet --debug XXX # or firejail --debug --quiet
Error: invalid --debug command line option
<!-- gh-comment-id:570952786 --> @rusty-snake commented on GitHub (Jan 5, 2020): or this (`--quiet` and `--debug`): ``` $ firejail --quiet --debug XXX # or firejail --debug --quiet Error: invalid --debug command line option ```
Author
Owner

@netblue30 commented on GitHub (May 30, 2021):

Closed for now, any other problem go to #4275

<!-- gh-comment-id:851021088 --> @netblue30 commented on GitHub (May 30, 2021): Closed for now, any other problem go to #4275
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1723
No description provided.