[GH-ISSUE #785] User is missing one of the groups #529

Closed
opened 2026-05-05 06:03:38 -06:00 by gitea-mirror · 4 comments
Owner

Originally created by @graywolf on GitHub (Sep 15, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/785

My user is missing one of his groups. This is what it looks outside

$ groups
video user1 secondary

this is what it looks inside

$ firejail --profile=/etc/firejail/vlc.profile 
Reading profile /etc/firejail/vlc.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Warning: user namespaces not available in the current kernel.
Parent pid 6039, child pid 6040
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted

Child process initialized

   $ groups
video user1

How can I get user inside to have all the group? I sadly cannot access my mounted samba drive due to missing group.

Thanks :)

Originally created by @graywolf on GitHub (Sep 15, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/785 My user is missing one of his groups. This is what it looks outside ``` $ groups video user1 secondary ``` this is what it looks inside ``` $ firejail --profile=/etc/firejail/vlc.profile Reading profile /etc/firejail/vlc.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-passwdmgr.inc Warning: user namespaces not available in the current kernel. Parent pid 6039, child pid 6040 Warning: /sbin directory link was not blacklisted Warning: /usr/sbin directory link was not blacklisted Child process initialized $ groups video user1 ``` How can I get user inside to have all the group? I sadly cannot access my mounted samba drive due to missing group. Thanks :)
gitea-mirror 2026-05-05 06:03:38 -06:00
Author
Owner

@manevich commented on GitHub (Sep 16, 2016):

firejail --ignore=nogroups --profile=/etc/firejail/vlc.profile should work

<!-- gh-comment-id:247546456 --> @manevich commented on GitHub (Sep 16, 2016): `firejail --ignore=nogroups --profile=/etc/firejail/vlc.profile` should work
Author
Owner

@netblue30 commented on GitHub (Sep 16, 2016):

What firejail version are you running?

<!-- gh-comment-id:247589161 --> @netblue30 commented on GitHub (Sep 16, 2016): What firejail version are you running?
Author
Owner

@graywolf commented on GitHub (Sep 19, 2016):

firejail --ignore=nogroups --profile=/etc/firejail/vlc.profile

that sadly doesn't help

version

0.9.40

Hm, the group is not a system one (gid == 1001), is it relevant?

<!-- gh-comment-id:248130704 --> @graywolf commented on GitHub (Sep 19, 2016): > firejail --ignore=nogroups --profile=/etc/firejail/vlc.profile that sadly doesn't help > version 0.9.40 Hm, the group is not a system one (gid == 1001), is it relevant?
Author
Owner

@netblue30 commented on GitHub (Sep 27, 2016):

Update to the latest version in git, there were a lot of fixes since 0.9.40

<!-- gh-comment-id:249946745 --> @netblue30 commented on GitHub (Sep 27, 2016): Update to the latest version in git, there were a lot of fixes since 0.9.40
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#529
No description provided.