[GH-ISSUE #5288] Delimitate execution permissions for firejail #2945

New issue

Closed

opened 2026-05-05 09:36:35 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 09:36:35 -06:00

Owner

Originally created by @emerajid on GitHub (Aug 2, 2022).
Original GitHub issue: https://github.com/netblue30/firejail/issues/5288

Problem: According to what I hear, firejail is targeted at single-user systems. Partly because of not knowing this, many people complain about firejail being a huge bulk of suid code. Personally I think (and therefore write this issue) that single-user design is a pity, because even regular users may have situations where they need to share their laptop.

Solution I'd like: Do what sudo does. Simple accessible only by root file with declarative syntax defining which users are allowed to use firejail. I would even suggest allowing users to turn on authorization in case they feel something very unexpected might happen.

If I propose futile feature, I would dearly like to know why, since I'm not much of a developer.

Originally created by @emerajid on GitHub (Aug 2, 2022). Original GitHub issue: https://github.com/netblue30/firejail/issues/5288 **Problem**: According to what I hear, firejail is targeted at single-user systems. Partly because of not knowing this, many people complain about firejail being a huge bulk of suid code. Personally I think (and therefore write this issue) that single-user design is a pity, because even regular users may have situations where they need to share their laptop. **Solution I'd like**: Do what sudo does. Simple accessible only by root file with declarative syntax defining which users are allowed to use firejail. I would even suggest allowing users to turn on authorization in case they feel something very unexpected might happen. If I propose futile feature, I would dearly like to know why, since I'm not much of a developer.

gitea-mirror

2026-05-05 09:36:35 -06:00

closed this issue
added the
documentation
label

gitea-mirror commented

2026-05-05 09:36:38 -06:00

Author

Owner

@rusty-snake commented on GitHub (Aug 2, 2022):

How is your suggestion different from firejail.users and Create a special firejail group?

@rusty-snake commented on GitHub (Aug 2, 2022): How is your suggestion different from [firejail.users](https://firejail.wordpress.com/features-3/man-firejail-users/) and [Create a special firejail group](https://firejail.wordpress.com/documentation-2/basic-usage/)?

gitea-mirror commented

2026-05-05 09:36:39 -06:00

Author

Owner

@emerajid commented on GitHub (Aug 2, 2022):

Thank you.

I think if you mention the file in man firejail somewhere in top, it would be much easier no notice. But it's off topic, so closing the issue.

@emerajid commented on GitHub (Aug 2, 2022): Thank you. I think if you mention the file in _man firejail_ somewhere in top, it would be much easier no notice. But it's off topic, so closing the issue.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2945

No description provided.

Rows
Columns