mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #5889] How do you unblacklist directories? #3121
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#3121
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @danielkrajnik on GitHub (Jul 9, 2023).
Original GitHub issue: https://github.com/netblue30/firejail/issues/5889
Apologies for not following the template again. How do you use
noblacklistoption? On my system it doesn't work at all - it does nothing whenever you point it to some folder. Programs keep complaining about programs not being available.This is impossible to work with. Is there any simple or not so simple way to control this access?
Is there any way to tell you WHY a directory has been blacklisted? How do you debug this?
Sorry for sounding frustrated, but this always catches you in the middle of your everyday tasks.
Does firejail not work with btrfs? Or Archlinux?
@rusty-snake commented on GitHub (Jul 10, 2023):
We have a lot arch userd, it is well tested there. For debugging you can use
--debugand technical understanding.For you noblacklist problem, start here: https://github.com/netblue30/firejail/wiki/Creating-Profiles#common-mistakes
@danielkrajnik commented on GitHub (Jul 10, 2023):
Thanks, but sorry this doesn't work. As far as I remember noblacklist always gets overwritten - adding it to a local profile:
never works (same with command line options). It wouldn't be a problem if there was a clear way to find out what's causing it, but as far as I can gather it's always a trial and error and requires absolutely top-tier knowledge of the system.
If there was a way to just say - please firejail pass through this path - don't let anything else override it (I believe bubblewrap in flatpaks provides such interface).
I've tried command line options, debug flag I've posted it recently (apologies for repeating the same question), but it just never works and you end up just removing the profile, because it's too complicated.
@danielkrajnik commented on GitHub (Jul 17, 2023):
Thank you again for explaining. I finally found a way to solve all problems with firejail. The key command turned out to be for me
firejail --profile=<PROFILE-NAME>. This accelerated debugging process tremendously.