[GH-ISSUE #1213] Exceptions to blacklists and 'noexec {HOME}' #830

Closed
opened 2026-05-05 06:56:25 -06:00 by gitea-mirror · 2 comments
Owner

Originally created by @Irvinehimself on GitHub (Apr 12, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1213

Okay,I have been struggling with this fo a week or so, and, lacking a dedicated forum, this seems to be the best/only place to ask.

The issue first came up when I was trying to write a very strict Firefox profile that blacklisted basically everything in {Home} except '.mozilla', and 'downloads. Although this example was fairly trivial and of little importance, it became more urgent when I realised that the line 'noexec{HOME}' in the standard GIMP profile prevented Gimp from loading plugins located in '~/.gimp-2.8/plug-ins/'

So, is there a way to add exceptions to a blacklist or 'noexec {DIR}'?

Thanks for a great program.
Irvine

Originally created by @Irvinehimself on GitHub (Apr 12, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1213 Okay,I have been struggling with this fo a week or so, and, lacking a dedicated forum, this seems to be the best/only place to ask. The issue first came up when I was trying to write a very strict Firefox profile that blacklisted basically everything in {Home} except '.mozilla', and 'downloads. Although this example was fairly trivial and of little importance, it became more urgent when I realised that the line 'noexec{HOME}' in the standard GIMP profile prevented Gimp from loading plugins located in '~/.gimp-2.8/plug-ins/' So, is there a way to add exceptions to a blacklist or 'noexec {DIR}'? Thanks for a great program. Irvine
Author
Owner

@chiraag-nataraj commented on GitHub (Apr 12, 2017):

For the tight Firefox profile (and others), check out my repo https://github.com/chiraag-nataraj/firejail-profiles!

You can use ignore noexec (I think?) to fix that GIMP error.

<!-- gh-comment-id:293713356 --> @chiraag-nataraj commented on GitHub (Apr 12, 2017): For the tight Firefox profile (and others), check out my repo https://github.com/chiraag-nataraj/firejail-profiles! You can use `ignore noexec` (I think?) to fix that GIMP error.
Author
Owner

@netblue30 commented on GitHub (Apr 12, 2017):

Plugins seem to be very popular with gimp people, similar to firefox addons. I commented out noexec line in the profile. Thanks for the bug.

<!-- gh-comment-id:293736113 --> @netblue30 commented on GitHub (Apr 12, 2017): Plugins seem to be very popular with gimp people, similar to firefox addons. I commented out noexec line in the profile. Thanks for the bug.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#830
No description provided.