Skip to content

Commit 2aed3ce

Browse files
committed
docs: clarify to run "sudo firecfg" as a normal (desktop) user
End users following the steps for desktop integration may end up running `sudo firecfg` as root (or as a similar account) rather than as a normal desktop user. In that case, programs opened through a desktop launcher would still not be running under firejail, which might surprise users. So clarify that `sudo firecfg` should be executed as a normal (desktop) user for desktop integration. Relates to #6657. Kind of relates to #5812. Reported-by: @ginto37
1 parent cd0be81 commit 2aed3ce

File tree

2 files changed

+10
-0
lines changed

2 files changed

+10
-0
lines changed

README.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -206,6 +206,9 @@ $ firejail --list
206206

207207
## Desktop integration
208208

209+
Note: Desktop integration is only applied to the user running firecfg, so make
210+
sure to run `sudo firecfg` as a normal (desktop) user, not as root.
211+
209212
Integrate your sandbox into your desktop by running the following two commands:
210213

211214
```sh
@@ -228,6 +231,8 @@ We keep the application list in
228231
[src/firecfg/firecfg.config](src/firecfg/firecfg.config)
229232
(/etc/firejail/firecfg.config when installed).
230233

234+
See `man firecfg` for details.
235+
231236
## Security profiles
232237

233238
Most Firejail command line options can be passed to the sandbox using profile

src/man/firecfg.1.in

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,11 @@ desktop managers are supported in this moment
2626
.PP
2727
Note: The examples use \fBsudo\fR, but \fBdoas\fR is also supported.
2828
.PP
29+
Note: Changes inside the user home (such as for desktop integration) are only
30+
made for the user running firecfg, so make sure to run "sudo firecfg" as a
31+
normal (desktop) user, not as root.
32+
See \fB\-\-fix\fR for details.
33+
.PP
2934
To set it up, run "sudo firecfg" after installing Firejail software.
3035
The same command should also be run after
3136
installing new programs. If the program is supported by Firejail, the symbolic link in /usr/local/bin

0 commit comments

Comments
 (0)