github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #5874] "firecfg.conf" with list of disabled profiles #3117

New issue

Closed

opened 2026-05-05 09:45:10 -06:00 by gitea-mirror · 4 comments

gitea-mirror commented

2026-05-05 09:45:10 -06:00

Owner

Originally created by @danielkrajnik on GitHub (Jun 29, 2023).
Original GitHub issue: https://github.com/netblue30/firejail/issues/5874

Some programs can't be made to work with firejail yet. Until a solution is found user needs to remove symlinks from /usr/local/bin to take them out of firejail. These symlinks however will be recreated on the next run of fiirecfg --clean && firecfg. If a list of "blacklisted" profiles stored in .config/firejail was read on each run of firecfg (to avoid creating them) instead that would be really helpful.

Describe alternatives you've considered

This script by rusty-snake could be used as a manual alternative, but it would be really helpful to have a native support.

Originally created by @danielkrajnik on GitHub (Jun 29, 2023). Original GitHub issue: https://github.com/netblue30/firejail/issues/5874 ### Is your feature request related to a problem? Please describe. Some programs [can't be made](https://github.com/netblue30/firejail/issues/4991) to work with firejail yet. Until a solution is found user needs to remove symlinks from `/usr/local/bin` to take them out of firejail. These symlinks however will be recreated on the next run of `fiirecfg --clean && firecfg`. If a list of "blacklisted" profiles stored in .config/firejail was read on each run of `firecfg` (to avoid creating them) instead that would be really helpful. ### Describe alternatives you've considered [This script](https://github.com/netblue30/firejail/issues/3214#issuecomment-583841631) by rusty-snake could be used as a manual alternative, but it would be really helpful to have a native support.

gitea-mirror

2026-05-05 09:45:10 -06:00

closed this issue
added the
firecfg

duplicate
labels

gitea-mirror commented

2026-05-05 09:45:13 -06:00

Author

Owner

@ghost commented on GitHub (Jun 30, 2023):

Until someone implements such native support you can use nojail. It is also available in the AUR for people who happen to run Arch Linux (based) OS.

@ghost commented on GitHub (Jun 30, 2023): Until someone implements such native support you can use [nojail](https://github.com/kugland/nojail). It is also available in the [AUR](https://aur.archlinux.org/packages/nojail/) for people who happen to run Arch Linux (based) OS.

gitea-mirror commented

2026-05-05 09:45:14 -06:00

Author

Owner

@rusty-snake commented on GitHub (Jun 30, 2023):

Related: #5874

There could be a --no-user-profile-discovery option.

If you start firecfg w/o sudo (e.g. pkexec) or use sudo env -u SUDO_USER firecfg you can get this behavior already because firecfg can then not discover your user (this will also affect firejail.login).

There are more alternatives from me 😁 https://github.com/rusty-snake/firecfg.py

@rusty-snake commented on GitHub (Jun 30, 2023): Related: #5874 There could be a `--no-user-profile-discovery` option. If you start firecfg w/o sudo (e.g. pkexec) or use `sudo env -u SUDO_USER firecfg` you can get this behavior already because firecfg can then not discover your user (this will also affect firejail.login). There are more alternatives from me 😁 https://github.com/rusty-snake/firecfg.py

gitea-mirror commented

2026-05-05 09:45:15 -06:00

Author

Owner

@kmk3 commented on GitHub (Jun 30, 2023):

You're in luck, I started working on #2097 yesterday.

The implementation currently works, but there are some API considerations; I'll
post a draft PR later.

Closing in favor of #2097.

@kmk3 commented on GitHub (Jun 30, 2023): You're in luck, I started working on #2097 yesterday. The implementation currently works, but there are some API considerations; I'll post a draft PR later. Closing in favor of #2097.

gitea-mirror commented

2026-05-05 09:45:15 -06:00

Author

Owner

@danielkrajnik commented on GitHub (Jun 30, 2023):

Oh wow, that's good to hear. Thank you for letting me know. I'm looking forward to see the PR.

@danielkrajnik commented on GitHub (Jun 30, 2023): Oh wow, that's good to hear. Thank you for letting me know. I'm looking forward to see the PR.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3117

No description provided.

Rows
Columns