github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #627] Expand the directories that are possible for whitelisting #433

New issue

Closed

opened 2026-05-05 05:51:07 -06:00 by gitea-mirror · 5 comments

gitea-mirror commented

2026-05-05 05:51:07 -06:00

Owner

Originally created by @pepa65 on GitHub (Jul 10, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/627

Currently only $HOME, /dev, /media, /opt, /var, and /tmp can be used for whitelisting. It would be very helpful there could be an option to include other directories.

Or if that is too cumbersome, perhaps could you allow for /data/ to be whitelisted?? I noticed one other person wanting to use that particular directory.

Originally created by @pepa65 on GitHub (Jul 10, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/627 Currently only $HOME, /dev, /media, /opt, /var, and /tmp can be used for whitelisting. It would be very helpful there could be an option to include other directories. Or if that is too cumbersome, perhaps could you allow for /data/ to be whitelisted?? I noticed one other person wanting to use that particular directory.

gitea-mirror

2026-05-05 05:51:07 -06:00

closed this issue
added the
enhancement
label

gitea-mirror commented

2026-05-05 05:51:12 -06:00

Author

Owner

@netblue30 commented on GitHub (Jul 10, 2016):

Some other directories are covered by --private options:

--private-bin: handles /bin, /sbin, /usr/bin, /usr/sbin, /usr/local/bin, /usr/local/sbin

--private-etc: /etc

What other directory do you have in mind?

@netblue30 commented on GitHub (Jul 10, 2016): Some other directories are covered by --private options: --private-bin: handles /bin, /sbin, /usr/bin, /usr/sbin, /usr/local/bin, /usr/local/sbin --private-etc: /etc What other directory do you have in mind?

gitea-mirror commented

2026-05-05 05:51:14 -06:00

Author

Owner

@pepa65 commented on GitHub (Jul 10, 2016):

/data
Sorry if it's not POSIX compliant... Otherwise I have to manually remove/modify a lot of whitelists in de default configs. But if you had a generic way of allowing people to choose, you wouldn't need to respond to every new request from erratic users. :-)

@pepa65 commented on GitHub (Jul 10, 2016): /data Sorry if it's not POSIX compliant... Otherwise I have to manually remove/modify a lot of whitelists in de default configs. But if you had a generic way of allowing people to choose, you wouldn't need to respond to every new request from erratic users. :-)

gitea-mirror commented

2026-05-05 05:51:17 -06:00

Author

Owner

@netblue30 commented on GitHub (Jul 10, 2016):

No problem, it can definitely be done in a generic way. I also have a similar request for /lib and /usr/lib and such.

So, I will bring in a generic whitelist for any directory under /, and private-lib support.

@netblue30 commented on GitHub (Jul 10, 2016): No problem, it can definitely be done in a generic way. I also have a similar request for /lib and /usr/lib and such. So, I will bring in a generic whitelist for any directory under /, and private-lib support.

gitea-mirror commented

2026-05-05 05:51:21 -06:00

Author

Owner

@msva commented on GitHub (Mar 5, 2017):

@netblue30,

I will bring in a generic whitelist for any directory under /

I'd VERY like to finally see that ASAP (and same for mkdir too)! 😀

Is it something that blocks you from doing that? Or, will you, at least, accept a PR with such modifications?

@msva commented on GitHub (Mar 5, 2017): @netblue30, > I will bring in a generic whitelist for any directory under / I'd ***VERY*** like to finally see that ASAP (and same for `mkdir` too)! 😀 Is it something that blocks you from doing that? Or, will you, at least, accept a PR with such modifications?

gitea-mirror commented

2026-05-05 05:51:23 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (Jul 25, 2018):

Let's move this to #2041, since private-lib has been added, but generic whitelist has not (yet) made it in.

@chiraag-nataraj commented on GitHub (Jul 25, 2018): Let's move this to #2041, since `private-lib` has been added, but generic whitelist has not (yet) made it in.

gitea-mirror referenced this issue

2026-05-05 08:30:12 -06:00

[GH-ISSUE #2936] Firefox and Thunderbird profiles broken #1833

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#433

No description provided.

Rows
Columns