github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #720] HOME environment variable not adjusted when using --user #492

New issue

Closed

opened 2026-05-05 05:57:44 -06:00 by gitea-mirror · 6 comments

gitea-mirror commented

2026-05-05 05:57:44 -06:00

Owner

Originally created by @lheckemann on GitHub (Aug 16, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/720

$ sudo firejail --user=$USER sh
$ echo $HOME
/root

Originally created by @lheckemann on GitHub (Aug 16, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/720 ``` $ sudo firejail --user=$USER sh $ echo $HOME /root ```

gitea-mirror

2026-05-05 05:57:44 -06:00

closed this issue
added the
information_old
label

gitea-mirror commented

2026-05-05 05:57:50 -06:00

Author

Owner

@Fred-Barclay commented on GitHub (Aug 16, 2016):

I believe this from the README.md might help:
--user option was deprecated, please use "sudo -u username firejail application" instead.
😸

@Fred-Barclay commented on GitHub (Aug 16, 2016): I believe this from the README.md might help: `--user option was deprecated, please use "sudo -u username firejail application" instead.` :smile_cat:

gitea-mirror commented

2026-05-05 05:57:52 -06:00

Author

Owner

@lheckemann commented on GitHub (Aug 16, 2016):

Oops. But I guess there's no way to give an unprivileged jail capabilities then?

@lheckemann commented on GitHub (Aug 16, 2016): Oops. But I guess there's no way to give an unprivileged jail capabilities then?

gitea-mirror commented

2026-05-05 05:57:54 -06:00

Author

Owner

@Fred-Barclay commented on GitHub (Aug 16, 2016):

I don't know about that; maybe @netblue30 or someone else with more experience could answer that better than I could. It will probably also depend on which capabilities you want to give the jail. 😉
But my guess would be sudo -u root firejail <application>.

@Fred-Barclay commented on GitHub (Aug 16, 2016): I don't know about that; maybe @netblue30 or someone else with more experience could answer that better than I could. It will probably also depend on _which_ capabilities you want to give the jail. :wink: But my guess would be `sudo -u root firejail <application>`.

gitea-mirror commented

2026-05-05 05:57:57 -06:00

Author

Owner

@lheckemann commented on GitHub (Aug 16, 2016):

But I don't want to run it as root, I want to run it as an unprivileged user gaining just certain capabilities like net_bind_service.

@lheckemann commented on GitHub (Aug 16, 2016): But I don't want to run it as root, I want to run it as an unprivileged user gaining just certain capabilities like `net_bind_service`.

gitea-mirror commented

2026-05-05 05:58:01 -06:00

Author

Owner

@netblue30 commented on GitHub (Aug 17, 2016):

I had to remove --user because it was equivalent with "sudo -u username firejail application".

If you need a program to keep certain capabilities, the standard way is to use "setcap" command. Here is an example of how they do it for ping: https://linux-audit.com/linux-capabilities-hardening-linux-binaries-by-removing-setuid/

@netblue30 commented on GitHub (Aug 17, 2016): I had to remove --user because it was equivalent with "sudo -u username firejail application". If you need a program to keep certain capabilities, the standard way is to use "setcap" command. Here is an example of how they do it for ping: https://linux-audit.com/linux-capabilities-hardening-linux-binaries-by-removing-setuid/

gitea-mirror commented

2026-05-05 05:58:04 -06:00

Author

Owner

@lheckemann commented on GitHub (Aug 17, 2016):

Ah right, thanks!

@lheckemann commented on GitHub (Aug 17, 2016): Ah right, thanks!

gitea-mirror referenced this issue

2026-05-05 10:05:15 -06:00

[PR #492] [MERGED] cherrytree.profile fix #3645

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#492

No description provided.

Rows
Columns