mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #700] whitelisting /home/myuser not possible #478
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#478
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @frank-github on GitHub (Aug 12, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/700
firejail --noprofile --whitelist=/home/myuser bash
firejail --noprofile --noblacklist=/home/myuser bash
but /home is still empty and firejail has mount a tempory home
how can I config firejail to let /home untouched/readable?
@chiraag-nataraj commented on GitHub (Aug 12, 2016):
The first gave me:
The second worked.
I'm using firejail 0.9.42~rc1
@frank-github commented on GitHub (Aug 12, 2016):
hupps, forgot to write my used version :(
firejail version 0.9.40
maybe I have to wait for 0.9.42
@manevich commented on GitHub (Aug 12, 2016):
@frank-github What you are trying to do?
If
/home/myuseris your home directory, thenfirejail --noprofilegives you full access to files in your home.@frank-github commented on GitHub (Aug 12, 2016):
yes and no
/home/myuser is a symlink to another filesystem, where the real home-dir is located
fgrep myuser /etc/passwd
myuser: x :1000:1000:myuser,,,,:/media/daten/myuser:/bin/bash
/home$ ls -l
lrwxrwxrwx 1 root root 18 Apr 27 2014 myuser -> /media/daten/myuser
I want to run my pdfviewer behind firejail. but it doesn't find anything, if it is called with a file like /home/myuser/example.pdf
firejail create a temporary /home, which is empty
@manevich commented on GitHub (Aug 12, 2016):
This is cause of problem. Firejail, for obvious reasons, is very strict when it comes to symlinks.
If I recall correctly, there was already some some talk about this matter.
@manevich commented on GitHub (Aug 12, 2016):
Here it is https://github.com/netblue30/firejail/issues/277.
@netblue30 commented on GitHub (Aug 12, 2016):
Yes, at this time we don't support home directories as symlinks.
@frank-github commented on GitHub (Aug 12, 2016):
if I would use a mountpoint for my /home/myuser instead of a symlink, would this be supported by firejail?
I'm not a linux expert, don't know if this makes any difference
@manevich commented on GitHub (Aug 12, 2016):
This should work.
@frank-github commented on GitHub (Aug 13, 2016):
mountpoint works 👍
thanks for all the help