github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #4478] I can't write in /usr #2677

New issue

Closed

opened 2026-05-05 09:20:24 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 09:20:24 -06:00

Owner

Originally created by @ghanan on GitHub (Aug 25, 2021).
Original GitHub issue: https://github.com/netblue30/firejail/issues/4478

In manjaro, I am trying to use pamac in firejail, but I can't get /usr (and posiibly others dirs) read-write.
I use:

firejail --name=root --noprofile --net=wlp10s0 --dns=8.8.8.8 --writable-etc --writable-run-user --writable-var --writable-var-log --noblacklist=/bin --noblacklist=/usr --noblacklist=/sbin --noblacklist=/lib --noblacklist=/lib32 --noblacklist=/libx32 --noblacklist=/lib64 /usr/bin/xfce4-terminal

I can do sudo pamac update and the database is updated, but when it try to install a package an error about /usr mounted in read-only appears.
May be we need some more --writable-xxx?
Thanks

Originally created by @ghanan on GitHub (Aug 25, 2021). Original GitHub issue: https://github.com/netblue30/firejail/issues/4478 In manjaro, I am trying to use pamac in firejail, but I can't get /usr (and posiibly others dirs) read-write. I use: ``` firejail --name=root --noprofile --net=wlp10s0 --dns=8.8.8.8 --writable-etc --writable-run-user --writable-var --writable-var-log --noblacklist=/bin --noblacklist=/usr --noblacklist=/sbin --noblacklist=/lib --noblacklist=/lib32 --noblacklist=/libx32 --noblacklist=/lib64 /usr/bin/xfce4-terminal ``` I can do `sudo pamac update` and the database is updated, but when it try to install a package an error about /usr mounted in read-only appears. May be we need some more --writable-xxx? Thanks

gitea-mirror

2026-05-05 09:20:24 -06:00

closed this issue
added the
notabug
label

gitea-mirror commented

2026-05-05 09:20:28 -06:00

Author

Owner

@ghanan commented on GitHub (Aug 25, 2021):

OK, I have got it using --read-write=/usr instead of --noblacklist=/usr.
But I can't install, an error about renaming /etc/ld.so.cache~ to /etc/ld.so.cache are shown.
Any help?

@ghanan commented on GitHub (Aug 25, 2021): OK, I have got it using `--read-write=/usr` instead of `--noblacklist=/usr`. But I can't install, an error about renaming `/etc/ld.so.cache~` to `/etc/ld.so.cache` are shown. Any help?

gitea-mirror commented

2026-05-05 09:20:28 -06:00

Author

Owner

@ghanan commented on GitHub (Aug 25, 2021):

I did it.
First, as root, I execute:

firejail --name=root --noprofile --net=wlp10s0 --dns=8.8.8.8 --writable-etc --writable-run-user --writable-var --writable-var-log --read-write=/bin --read-write=/usr --read-write=/sbin --read-write=/lib --read-write=/lib32 --read-write=/libx32 --read-write=/lib64

Then, in other terminal, as root, I execute firejail --join-network=root and in this terminal I can install programs.

May be some --writable-xxx or --read-write=xxx are not necessary. Some day I will try to find which one are needed.

@ghanan commented on GitHub (Aug 25, 2021): I did it. First, as root, I execute: ``` firejail --name=root --noprofile --net=wlp10s0 --dns=8.8.8.8 --writable-etc --writable-run-user --writable-var --writable-var-log --read-write=/bin --read-write=/usr --read-write=/sbin --read-write=/lib --read-write=/lib32 --read-write=/libx32 --read-write=/lib64 ``` Then, in other terminal, as root, I execute `firejail --join-network=root` and in this terminal I can install programs. May be some --writable-xxx or --read-write=xxx are not necessary. Some day I will try to find which one are needed.

gitea-mirror referenced this issue

2026-05-05 10:20:53 -06:00

[PR #2677] [MERGED] Drop noblacklist ${DOWNLOADS} in bitwarden.profile #4479

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2677

No description provided.

Rows
Columns