[GH-ISSUE #6639] Cannot override read-only entry with --read-write option #3321

New issue

Closed

opened 2026-05-05 09:54:32 -06:00 by gitea-mirror · 1 comment

gitea-mirror commented

2026-05-05 09:54:32 -06:00

Owner

Originally created by @kolAflash on GitHub (Feb 4, 2025).
Original GitHub issue: https://github.com/netblue30/firejail/issues/6639

I'd like to use most of the default profile. But I need to edit a few files like ~/.bashrc.
(actually I use it together with the --whitelist=$HOME/Downloads/, so it's not the real .bashrc being written to)

Describe the solution you'd like

Please add the possibility, to override read-only instructions from the profile with command line --read-write instructions.

Describe alternatives you've considered

Workaround:
Create a new profile: test.profile

include default.profile
read-write ${HOME}/.bashrc

firejail --profile=foo.profile

Environment

Name/version/arch of the Linux kernel (uname -srm): Linux 6.1.0-30-amd64 x86_64
Name/version of the Linux distribution (e.g. "Ubuntu 20.04" or "Arch Linux"): Debian-12
Version of Firejail (firejail --version): 0.9.72

Originally created by @kolAflash on GitHub (Feb 4, 2025). Original GitHub issue: https://github.com/netblue30/firejail/issues/6639 ### Is your feature request related to a problem? Please describe. I'd like to use most of the [default](https://github.com/netblue30/firejail/blob/a6f26b6e3c9d0db3ed2491c6ffdfa25ae38f14d4/etc/profile-a-l/default.profile) profile. But I need to edit a few files like `~/.bashrc`. _(actually I use it together with the `--whitelist=$HOME/Downloads/`, so it's not the real `.bashrc` being written to)_ ### Describe the solution you'd like Please add the possibility, to override `read-only` instructions from [the profile](https://github.com/netblue30/firejail/blob/a6f26b6e3c9d0db3ed2491c6ffdfa25ae38f14d4/etc/inc/disable-common.inc#L305) with command line `--read-write` instructions. ### Describe alternatives you've considered Workaround: Create a new profile: `test.profile` ``` include default.profile read-write ${HOME}/.bashrc ``` `firejail --profile=foo.profile` ### Environment - Name/version/arch of the Linux kernel (`uname -srm`): `Linux 6.1.0-30-amd64 x86_64` - Name/version of the Linux distribution (e.g. "Ubuntu 20.04" or "Arch Linux"): `Debian-12` - Version of Firejail (`firejail --version`): `0.9.72`

gitea-mirror

2026-05-05 09:54:32 -06:00

closed this issue
added the
notabug
label

gitea-mirror commented

2026-05-05 09:54:34 -06:00

Author

Owner

@rusty-snake commented on GitHub (Feb 4, 2025):

You can use --ignore='read-only ${HOME}/.bashrc'.

@rusty-snake commented on GitHub (Feb 4, 2025): You can use `--ignore='read-only ${HOME}/.bashrc'`.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3321

No description provided.

Rows
Columns