[GH-ISSUE #469] Is there a way to make private-etc /etc writeable? #336

New issue

Closed

opened 2026-05-05 05:37:15 -06:00 by gitea-mirror · 1 comment

gitea-mirror commented

2026-05-05 05:37:15 -06:00

Owner

Originally created by @ivan on GitHub (Apr 21, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/469

I have a profile that blacklists /home and sets up a new HOME for the jail, and this works fine with everything except ssh, which insists on reading the home directory out of /etc/passwd instead of from the HOME variable. Is there any way private-etc could make the jail's /etc (optionally) writeable so that I could modify /etc/passwd to satisfy ssh?

(I was previously using tmpfs /home and setting things up there, but tmpfs is no longer allowed as non-root. My profile is here.)

Originally created by @ivan on GitHub (Apr 21, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/469 I have a profile that blacklists `/home` and sets up a new `HOME` for the jail, and this works fine with everything except ssh, which insists on reading the home directory out of `/etc/passwd` instead of from the `HOME` variable. Is there any way private-etc could make the jail's `/etc` (optionally) writeable so that I could modify `/etc/passwd` to satisfy ssh? (I was previously using `tmpfs /home` and setting things up there, but `tmpfs` is no longer allowed as non-root. My profile [is here](https://github.com/ludios/rustjail/blob/70f50f6d037015cc24f1264534fa24232582007d/rustjail.profile).)

gitea-mirror closed this issue

2026-05-05 05:37:17 -06:00

gitea-mirror commented

2026-05-05 05:37:19 -06:00

Author

Owner

@ivan commented on GitHub (Apr 22, 2016):

Never mind, I figured out I just need to make my own ssh that contains

/usr/bin/ssh -F $HOME/.ssh/config -o UserKnownHostsFile=$HOME/.ssh/known_hosts "$@"

@ivan commented on GitHub (Apr 22, 2016): Never mind, I figured out I just need to make my own `ssh` that contains ``` /usr/bin/ssh -F $HOME/.ssh/config -o UserKnownHostsFile=$HOME/.ssh/known_hosts "$@" ```

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#336

No description provided.

Rows
Columns