[GH-ISSUE #5889] How do you unblacklist directories? #3121

Closed
opened 2026-05-05 09:45:30 -06:00 by gitea-mirror · 3 comments
Owner

Originally created by @danielkrajnik on GitHub (Jul 9, 2023).
Original GitHub issue: https://github.com/netblue30/firejail/issues/5889

Apologies for not following the template again. How do you use noblacklist option? On my system it doesn't work at all - it does nothing whenever you point it to some folder. Programs keep complaining about programs not being available.

This is impossible to work with. Is there any simple or not so simple way to control this access?

Is there any way to tell you WHY a directory has been blacklisted? How do you debug this?

Sorry for sounding frustrated, but this always catches you in the middle of your everyday tasks.

Does firejail not work with btrfs? Or Archlinux?

Originally created by @danielkrajnik on GitHub (Jul 9, 2023). Original GitHub issue: https://github.com/netblue30/firejail/issues/5889 Apologies for not following the template again. How do you use `noblacklist` option? On my system it doesn't work at all - it does nothing whenever you point it to some folder. Programs keep complaining about programs not being available. This is impossible to work with. Is there any simple or not so simple way to control this access? Is there any way to tell you WHY a directory has been blacklisted? How do you debug this? Sorry for sounding frustrated, but this always catches you in the middle of your everyday tasks. Does firejail not work with btrfs? Or Archlinux?
gitea-mirror 2026-05-05 09:45:30 -06:00
  • closed this issue
  • added the
    question
    label
Author
Owner

@rusty-snake commented on GitHub (Jul 10, 2023):

We have a lot arch userd, it is well tested there. For debugging you can use --debug and technical understanding.

For you noblacklist problem, start here: https://github.com/netblue30/firejail/wiki/Creating-Profiles#common-mistakes

<!-- gh-comment-id:1629201712 --> @rusty-snake commented on GitHub (Jul 10, 2023): We have a lot arch userd, it is well tested there. For debugging you can use `--debug` and technical understanding. For you noblacklist problem, start here: https://github.com/netblue30/firejail/wiki/Creating-Profiles#common-mistakes
Author
Owner

@danielkrajnik commented on GitHub (Jul 10, 2023):

Thanks, but sorry this doesn't work. As far as I remember noblacklist always gets overwritten - adding it to a local profile:

noblacklist /home/user/directory/to/pass

never works (same with command line options). It wouldn't be a problem if there was a clear way to find out what's causing it, but as far as I can gather it's always a trial and error and requires absolutely top-tier knowledge of the system.

If there was a way to just say - please firejail pass through this path - don't let anything else override it (I believe bubblewrap in flatpaks provides such interface).

I've tried command line options, debug flag I've posted it recently (apologies for repeating the same question), but it just never works and you end up just removing the profile, because it's too complicated.

<!-- gh-comment-id:1629336246 --> @danielkrajnik commented on GitHub (Jul 10, 2023): Thanks, but sorry this doesn't work. As far as I remember noblacklist always gets overwritten - adding it to a local profile: ```` noblacklist /home/user/directory/to/pass ```` never works (same with command line options). It wouldn't be a problem if there was a clear way to find out what's causing it, but as far as I can gather it's always a trial and error and requires absolutely top-tier knowledge of the system. If there was a way to just say - please firejail pass through this path - don't let anything else override it (I believe bubblewrap in flatpaks provides such interface). I've tried command line options, debug flag I've [posted it recently](https://github.com/netblue30/firejail/issues/5879) (apologies for repeating the same question), but it just never works and you end up just removing the profile, because it's too complicated.
Author
Owner

@danielkrajnik commented on GitHub (Jul 17, 2023):

Thank you again for explaining. I finally found a way to solve all problems with firejail. The key command turned out to be for me firejail --profile=<PROFILE-NAME> . This accelerated debugging process tremendously.

<!-- gh-comment-id:1637268531 --> @danielkrajnik commented on GitHub (Jul 17, 2023): Thank you again for explaining. I finally found a way to solve all problems with firejail. The key command turned out to be for me `firejail --profile=<PROFILE-NAME>` . This accelerated debugging process tremendously.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3121
No description provided.