Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow "$HOME" along with "${HOME}" in profiles or signal error #3071

Closed
jonleivent opened this issue Dec 3, 2019 · 1 comment
Closed

Allow "$HOME" along with "${HOME}" in profiles or signal error #3071

jonleivent opened this issue Dec 3, 2019 · 1 comment
Labels
enhancement New feature request
Milestone

Comments

@jonleivent
Copy link

I have made this same error several times now:

blacklist $HOME/something-private

silently doesn't blacklist anything. No error is printed. Of course:

blacklist ${HOME}/something-private

and

blacklist ~/something-private

both work. I would greatly appreciate it if firejail either accepted $HOME in such contexts, or signaled an error. Yes, I know everyone is entitled to their own DSL...

@netblue30
Copy link
Owner

Printing an error:

$ cat p.profile
blacklist $HOME/.ssh

$ firejail --profile=p
Reading profile p
Parent pid 4893, child pid 4895
Error: $HOME is not allowed in profile files, please replace it with ${HOME}
Error: proc 4893 cannot sync with peer: unexpected EOF
Peer 4895 unexpectedly exited with status 1

@kmk3 kmk3 changed the title please either allow "$HOME" along with "${HOME}" in profiles or signal error Allow "$HOME" along with "${HOME}" in profiles or signal error Sep 5, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature request
Projects
None yet
Development

No branches or pull requests

4 participants