github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #4120] How to allow access to other home directories? #2543

New issue

Closed

opened 2026-05-05 09:13:09 -06:00 by gitea-mirror · 4 comments

gitea-mirror commented

2026-05-05 09:13:09 -06:00

Owner

Originally created by @muziker on GitHub (Mar 20, 2021).
Original GitHub issue: https://github.com/netblue30/firejail/issues/4120

Not a bug, but i couldn't find any information anywhere else. How do i allow a profile to access a /home/otheruser directory, assuming it is usually accessible? I've tried whitelist, but it looks like all other home directories are dropped.

Originally created by @muziker on GitHub (Mar 20, 2021). Original GitHub issue: https://github.com/netblue30/firejail/issues/4120 Not a bug, but i couldn't find any information anywhere else. How do i allow a profile to access a /home/otheruser directory, assuming it is usually accessible? I've tried whitelist, but it looks like all other home directories are dropped.

gitea-mirror

2026-05-05 09:13:09 -06:00

closed this issue
added the
question_old
label

gitea-mirror commented

2026-05-05 09:13:12 -06:00

Author

Owner

@rusty-snake commented on GitHub (Mar 20, 2021):

allusers

@rusty-snake commented on GitHub (Mar 20, 2021): `allusers`

gitea-mirror commented

2026-05-05 09:13:13 -06:00

Author

Owner

@muziker commented on GitHub (Mar 20, 2021):

But only one specific directory, and to maintain the id:group ownership, since if it is nobody:nogroup, the user will not be able to access it.

@muziker commented on GitHub (Mar 20, 2021): But only one specific directory, and to maintain the id:group ownership, since if it is nobody:nogroup, the user will not be able to access it.

gitea-mirror commented

2026-05-05 09:13:14 -06:00

Author

Owner

@rusty-snake commented on GitHub (Mar 20, 2021):

Sorry I don't fully get you, but If the files are owned by an other user and you have only access to it via group, your supplemetray groups needs to preserved and the other user must be present:

ignore noroot
ignore nogroups

@rusty-snake commented on GitHub (Mar 20, 2021): Sorry I don't fully get you, but If the files are owned by an other user and you have only access to it via group, your supplemetray groups needs to preserved and the other user must be present: ``` ignore noroot ignore nogroups ```

gitea-mirror commented

2026-05-05 09:13:16 -06:00

Author

Owner

@muziker commented on GitHub (Mar 20, 2021):

Thanks that helps ! The noroot was ensuring only one user was on the system. ignore noroot allowed the traditional permissions model to work.

@muziker commented on GitHub (Mar 20, 2021): Thanks that helps ! The noroot was ensuring only one user was on the system. ignore noroot allowed the traditional permissions model to work.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2543

No description provided.

Rows
Columns