github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #3677] Disable user-defined profile #2315

New issue

Closed

opened 2026-05-05 09:00:16 -06:00 by gitea-mirror · 4 comments

gitea-mirror commented

2026-05-05 09:00:16 -06:00

Owner

Originally created by @johnwmail on GitHub (Oct 18, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3677

Hi, is it possible disable user-define profile?
I don't want the user ignore the system rules/profile.
Thanks.

Originally created by @johnwmail on GitHub (Oct 18, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3677 Hi, is it possible disable user-define profile? I don't want the user ignore the system rules/profile. Thanks.

gitea-mirror closed this issue

2026-05-05 09:00:18 -06:00

gitea-mirror commented

2026-05-05 09:00:19 -06:00

Author

Owner

@rusty-snake commented on GitHub (Oct 18, 2020):

It would be possible to add a option to e.g. firejail.config to disable ~/.config/firejail and commanline args. However firejail can not make sure a program is started in a sandbox (/usr/bin/thunderbird is still possible). So if your use-case is to force restrictions for some user-started programs, you should use a LSM such as SELinux or AppArmor.

@rusty-snake commented on GitHub (Oct 18, 2020): It would be possible to add a option to e.g. firejail.config to disable ~/.config/firejail and commanline args. However firejail can not make sure a program is started in a sandbox (`/usr/bin/thunderbird` is still possible). So if your use-case is to force restrictions for some user-started programs, you should use a LSM such as SELinux or AppArmor.

gitea-mirror commented

2026-05-05 09:00:20 -06:00

Author

Owner

@johnwmail commented on GitHub (Oct 18, 2020):

It would be possible to add a option to e.g. firejail.config to disable ~/.config/firejail and commanline args.

Hi, it is what I am looking for, would you please show me an example?
Which option should I add it to /etc/firejail/firejail.config?
Thanks.

@johnwmail commented on GitHub (Oct 18, 2020): > It would be possible to add a option to e.g. firejail.config to disable ~/.config/firejail and commanline args. Hi, it is what I am looking for, would you please show me an example? Which option should I add it to /etc/firejail/firejail.config? Thanks.

gitea-mirror commented

2026-05-05 09:00:21 -06:00

Author

Owner

@rusty-snake commented on GitHub (Oct 18, 2020):

I meant it would be possible to implement. ATM there is no such option. Though I'm still not sure if this is useful as running w/o firejail is still possible. What scenario do you target?

@rusty-snake commented on GitHub (Oct 18, 2020): I meant it would be possible to implement. ATM there is no such option. Though I'm still not sure if this is useful as running w/o firejail is still possible. What scenario do you target?

gitea-mirror commented

2026-05-05 09:00:22 -06:00

Author

Owner

@johnwmail commented on GitHub (Oct 18, 2020):

Yes, you are right, user can always override the parameter with command line, so I close this.
Thanks.

@johnwmail commented on GitHub (Oct 18, 2020): Yes, you are right, user can always override the parameter with command line, so I close this. Thanks.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2315

No description provided.

Rows
Columns