github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #3857] [Question] Is it possible to modify the profile while firejail is running? #2425

New issue

Closed

opened 2026-05-05 09:05:59 -06:00 by gitea-mirror · 5 comments

gitea-mirror commented

2026-05-05 09:05:59 -06:00

Owner

Originally created by @Nathoufresh on GitHub (Dec 31, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3857

Sorry if this question has already been asked.

A neat feature would be: when an app requires a permission, firejail suspend the subprocess and then a dialog appears "appname wants to access this permission" then you could choose from allow this time, allow permanently, etc... But it would need firejail to be able to modify the profile while it's already running. Is it feasible?

Originally created by @Nathoufresh on GitHub (Dec 31, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3857 Sorry if this question has already been asked. A neat feature would be: when an app requires a permission, firejail suspend the subprocess and then a dialog appears "appname wants to access this permission" then you could choose from allow this time, allow permanently, etc... But it would need firejail to be able to modify the profile while it's already running. Is it feasible?

gitea-mirror closed this issue

2026-05-05 09:06:00 -06:00

gitea-mirror commented

2026-05-05 09:06:02 -06:00

Author

Owner

@rusty-snake commented on GitHub (Dec 31, 2020):

But it would need firejail to be able to modify the profile while it's already running. Is it feasible?

For filesystem (e.g. whitelist) permissions yes, for others like nonoewprivs no.

@rusty-snake commented on GitHub (Dec 31, 2020): > But it would need firejail to be able to modify the profile while it's already running. Is it feasible? For filesystem (e.g. whitelist) permissions yes, for others like nonoewprivs no.

gitea-mirror commented

2026-05-05 09:06:03 -06:00

Author

Owner

@Nathoufresh commented on GitHub (Dec 31, 2020):

Tanks for your prompt answer!

For the permissions that cannot be changed on the go we could tell the user that we need to restart the app.
What would be the disadvantages/problems of such a GUI interface?

@Nathoufresh commented on GitHub (Dec 31, 2020): Tanks for your prompt answer! For the permissions that cannot be changed on the go we could tell the user that we need to restart the app. What would be the disadvantages/problems of such a GUI interface?

gitea-mirror commented

2026-05-05 09:06:04 -06:00

Author

Owner

@rusty-snake commented on GitHub (Jan 1, 2021):

What would be the disadvantages/problems of such a GUI interface?

Not all systems has a GUI. However as long as there would be something like --static-permissions to disable such prompts everything is fine.
Suspending a program is critical if this programs communicates with others.
How can we detect that a program wants to access to a certain file?

@rusty-snake commented on GitHub (Jan 1, 2021): > What would be the disadvantages/problems of such a GUI interface? 1. Not all systems has a GUI. However as long as there would be something like `--static-permissions` to disable such prompts everything is fine. 2. Suspending a program is critical if this programs communicates with others. 3. How can we detect that a program wants to access to a certain file?

gitea-mirror commented

2026-05-05 09:06:07 -06:00

Author

Owner

@Nathoufresh commented on GitHub (Jan 2, 2021):

How can we detect that a program wants to access to a certain file?

I don't know how firejail works internally. I thought there would be an obvious way to get that information in firejail maybe I should create a new program from scratch.. Thanks for your time.

@Nathoufresh commented on GitHub (Jan 2, 2021): > How can we detect that a program wants to access to a certain file? I don't know how firejail works internally. I thought there would be an obvious way to get that information in firejail maybe I should create a new program from scratch.. Thanks for your time.

gitea-mirror commented

2026-05-05 09:06:08 -06:00

Author

Owner

@rusty-snake commented on GitHub (Mar 8, 2021):

I'm closing here due to inactivity, please fell free to request to reopen if you have more questions.

@rusty-snake commented on GitHub (Mar 8, 2021): I'm closing here due to inactivity, please fell free to request to reopen if you have more questions.

gitea-mirror referenced this issue

2026-05-05 10:17:31 -06:00

[PR #2425] [MERGED] Add exfalso profile #4301

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2425

No description provided.

Rows
Columns