[GH-ISSUE #834] enhancement: support user wildcards in login.users #567

Closed
opened 2026-05-05 06:09:49 -06:00 by gitea-mirror · 3 comments
Owner

Originally created by @dahabakuk on GitHub (Oct 4, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/834

hi,

i would like to use firejail to restrict users logging on my systems. those users can come from different active directory domains and all have a certain schema:

DOMAIN1\ABCuser1
DOMAIN2\ABCadmin2

it would be great to be able to use wildcards in login.users like: DOMAIN\* or even ABC*

the userlists change quite often and contain serveral hundred Users - so its not doable to add all users to the file...

br

Originally created by @dahabakuk on GitHub (Oct 4, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/834 hi, i would like to use firejail to restrict users logging on my systems. those users can come from different active directory domains and all have a certain schema: DOMAIN1\ABCuser1 DOMAIN2\ABCadmin2 it would be great to be able to use wildcards in login.users like: DOMAIN\\* or even ABC* the userlists change quite often and contain serveral hundred Users - so its not doable to add all users to the file... br
gitea-mirror 2026-05-05 06:09:49 -06:00
Author
Owner

@netblue30 commented on GitHub (Oct 9, 2016):

All done, you can try it out. It is implemented based on fnmatch (http://www.gnu.org/software/libc/manual/html_node/Wildcard-Matching.html#Wildcard-Matching).

<!-- gh-comment-id:252487605 --> @netblue30 commented on GitHub (Oct 9, 2016): All done, you can try it out. It is implemented based on fnmatch (http://www.gnu.org/software/libc/manual/html_node/Wildcard-Matching.html#Wildcard-Matching).
Author
Owner

@dahabakuk commented on GitHub (Oct 10, 2016):

great! seems to work - but got hit by #360 - thanks anyways!

<!-- gh-comment-id:252541584 --> @dahabakuk commented on GitHub (Oct 10, 2016): great! seems to work - but got hit by #360 - thanks anyways!
Author
Owner

@netblue30 commented on GitHub (Oct 10, 2016):

In /etc/firejail/firejail.config add "userns no" and it will disable the user namespace.

<!-- gh-comment-id:252607468 --> @netblue30 commented on GitHub (Oct 10, 2016): In /etc/firejail/firejail.config add "userns no" and it will disable the user namespace.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#567
No description provided.