Sample Header Ad - 728x90

Whitelist a directory for execution with firejail

2 votes
2 answers
5330 views
How can I whitelist a directory for execution with firejail? In particular, I would like to execute Firefox Nightly in firejail. But I get the following error: $ firejail --profile=/etc/firejail/firefox.profile --whitelist=$HOME/software/firefox-nightly ./firefox Reading profile /etc/firejail/firefox.profile Reading profile /etc/firejail/whitelist-usr-share-common.inc Reading profile /etc/firejail/firefox-common.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-exec.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-var-common.inc Warning: networking feature is disabled in Firejail configuration file Parent pid 769552, child pid 769553 Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. Post-exec seccomp protector enabled Seccomp list in: !chroot, check list: @default-keep, prelist: unknown, Child process initialized in 91.60 ms Exec failed with error: Permission denied and testing with a shell: $ firejail --profile=/etc/firejail/firefox.profile --whitelist=$HOME/software/firefox-nightly sh [...] $ ls -l firefox -rwxr-xr-x 1 vinc17 vinc17 16928 2020-05-16 13:22:44 firefox $ ./firefox sh: 2: ./firefox: Permission denied Note: /etc/firejail/disable-exec.inc has noexec ${HOME}. But adding --ignore='noexec ${HOME}' just after firejail has no effect. Moving the directory under /usr/local has no effect either.
Asked by vinc17 (12504 rep)
May 16, 2020, 04:06 PM
Last activity: Dec 7, 2020, 04:28 PM