github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #4753] Allow running `firecfg` as non-root #2770

New issue

Closed

opened 2026-05-05 09:26:07 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 09:26:07 -06:00

Owner

Originally created by @WhyNotHugo on GitHub (Dec 8, 2021).
Original GitHub issue: https://github.com/netblue30/firejail/issues/4753

firecfg creates per-user overrides for desktop files which point to a hardcoded binary in /usr/bin/.

I'd like non-sudo users to be able to run firecfg so as to create these symlinks for themselves too.

Describe the solution you'd like

Allow running firecfg as non-root. This won't touch /usr/local/bin, but only write the per-user desktop overrides. Might make sense to require an extra flag to avoid accidentally running it when someone intends to use sudo firecfg.

Describe alternatives you've considered

Have firecfg mutate files in /usr/share/applications/. Should work, but I'm personally reluctant of mutating package-owned files. I'm sure many others would have an issue with this too.
There's, regrettably, no local overrides for desktop files (e.g.: I don't think /usr/local/share/applications is a thing).

Additional context

Using sudo firecfg works, but it needs to be run by each user, which means each local users needs to have sudo permissions, which isn't always viable.

Originally created by @WhyNotHugo on GitHub (Dec 8, 2021). Original GitHub issue: https://github.com/netblue30/firejail/issues/4753 ### Is your feature request related to a problem? Please describe. `firecfg` creates per-user overrides for desktop files which point to a hardcoded binary in `/usr/bin/`. I'd like non-sudo users to be able to run `firecfg` so as to create these symlinks for themselves too. ### Describe the solution you'd like Allow running `firecfg` as non-root. This won't touch `/usr/local/bin`, but only write the per-user desktop overrides. Might make sense to require an extra flag to avoid accidentally running it when someone intends to use `sudo firecfg`. ### Describe alternatives you've considered 1. Have `firecfg` mutate files in `/usr/share/applications/`. Should work, but I'm personally reluctant of mutating package-owned files. I'm sure many others would have an issue with this too. 2. There's, regrettably, no local overrides for desktop files (e.g.: I don't think `/usr/local/share/applications` is a thing). ### Additional context Using `sudo firecfg` works, but it needs to be run by each user, which means each local users needs to have `sudo` permissions, which isn't always viable.

gitea-mirror

2026-05-05 09:26:07 -06:00

closed this issue
added the
firecfg

notabug
labels

gitea-mirror commented

2026-05-05 09:26:10 -06:00

Author

Owner

@rusty-snake commented on GitHub (Dec 8, 2021):

Could you describe the difference to firecfg --bindir=$HOME/.local/bin and firecfg --fix?

@rusty-snake commented on GitHub (Dec 8, 2021): Could you describe the difference to `firecfg --bindir=$HOME/.local/bin` and `firecfg --fix`?

gitea-mirror commented

2026-05-05 09:26:11 -06:00

Author

Owner

@WhyNotHugo commented on GitHub (Dec 8, 2021):

Sorry, firecfg --fix seems to be exactly what I was looking for, not sure how I misinterpreted that (I swear I just went through the whole man page!).

@WhyNotHugo commented on GitHub (Dec 8, 2021): Sorry, `firecfg --fix` seems to be exactly what I was looking for, not sure how I misinterpreted that (I swear I just went through the whole man page!).

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2770

No description provided.

Rows
Columns

[GH-ISSUE #4753] Allow running firecfg as non-root #2770

Is your feature request related to a problem? Please describe.

Describe the solution you'd like

Describe alternatives you've considered

Additional context

[GH-ISSUE #4753] Allow running `firecfg` as non-root #2770