[GH-ISSUE #3081] notrash option #1934

Open
opened 2026-05-05 08:36:09 -06:00 by gitea-mirror · 2 comments
Owner

Originally created by @rusty-snake on GitHub (Dec 15, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3081

current situation

Access to the user trash is blocked by an blacklist in disable-common.
f55239b7a1/etc/disable-common.inc (L8)

suggested change

Replacing the firejail --noblacklist=${HOME}/.local/share/Trash APP workflow which is quite unhandy for new users with firejail --ignore=notrash APP which is easier to find out.

The new option can be placed between nosound and notv.

reasons

Blocking access to trash by default is good since there can be files from anywhere, but sometimes you want. The it is easier to see that there is a notrash option in a profile which can be commented or ignored instead of diving into a included profile and search for the blacklist command.

Originally created by @rusty-snake on GitHub (Dec 15, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/3081 #### current situation Access to the user trash is blocked by an blacklist in disable-common. https://github.com/netblue30/firejail/blob/f55239b7a13f6f4821fcb9410c3ae642e2577bba/etc/disable-common.inc#L8 #### suggested change Replacing the `firejail --noblacklist=${HOME}/.local/share/Trash APP` workflow which is quite unhandy for new users with `firejail --ignore=notrash APP` which is easier to find out. The new option can be placed between `nosound` and `notv`. #### reasons Blocking access to trash by default is good since there can be files from anywhere, but sometimes you want. The it is easier to see that there is a `notrash` option in a profile which can be commented or `ignore`d instead of diving into a `include`d profile and search for the blacklist command.
gitea-mirror added the
enhancement
label 2026-05-05 08:36:09 -06:00
Author
Owner

@netblue30 commented on GitHub (Dec 15, 2019):

Let's go for it, I'll put the code in.

<!-- gh-comment-id:565839510 --> @netblue30 commented on GitHub (Dec 15, 2019): Let's go for it, I'll put the code in.
Author
Owner

@rusty-snake commented on GitHub (Jun 8, 2020):

disbale-mnt-write (or wthatever):
read-only /mnt
read-only /media
read-only /run/mount
read-only /run/media
protected-dot-files
<!-- gh-comment-id:640723315 --> @rusty-snake commented on GitHub (Jun 8, 2020): ``` disbale-mnt-write (or wthatever): read-only /mnt read-only /media read-only /run/mount read-only /run/media ``` ``` protected-dot-files ```
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1934
No description provided.