{"action":"created","issue":{"url":"https://api.github.com/repos/netblue30/firejail/issues/208","repository_url":"https://api.github.com/repos/netblue30/firejail","labels_url":"https://api.github.com/repos/netblue30/firejail/issues/208/labels{/name}","comments_url":"https://api.github.com/repos/netblue30/firejail/issues/208/comments","events_url":"https://api.github.com/repos/netblue30/firejail/issues/208/events","html_url":"https://github.com/netblue30/firejail/issues/208","id":124644076,"number":208,"title":"option to change user","user":{"login":"the8472","id":1065730,"avatar_url":"https://avatars2.githubusercontent.com/u/1065730?v=3","gravatar_id":"","url":"https://api.github.com/users/the8472","html_url":"https://github.com/the8472","followers_url":"https://api.github.com/users/the8472/followers","following_url":"https://api.github.com/users/the8472/following{/other_user}","gists_url":"https://api.github.com/users/the8472/gists{/gist_id}","starred_url":"https://api.github.com/users/the8472/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/the8472/subscriptions","organizations_url":"https://api.github.com/users/the8472/orgs","repos_url":"https://api.github.com/users/the8472/repos","events_url":"https://api.github.com/users/the8472/events{/privacy}","received_events_url":"https://api.github.com/users/the8472/received_events","type":"User","site_admin":false},"labels":[{"id":245694821,"url":"https://api.github.com/repos/netblue30/firejail/labels/enhancement","name":"enhancement","color":"84b6eb","default":true}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":11,"created_at":"2016-01-03T11:29:35Z","updated_at":"2017-07-04T23:33:31Z","closed_at":"2016-01-23T15:36:33Z","body":"Currently it's only possible to bind-mount paths when called by root.\n\nBut calling as root prevents passing `--noroot` which in turn necessitates changing the user within the sandbox via `su` or `sudo` and possibly `unshare` to do what `--noroot` normally would.\n\nBut all those do require more capabilities/system calls than necessary.\n\nSo i think it would be useful to drop capabilities, change user and create a user namespace in one go.\n"},"comment":{"url":"https://api.github.com/repos/netblue30/firejail/issues/comments/312966742","html_url":"https://github.com/netblue30/firejail/issues/208#issuecomment-312966742","issue_url":"https://api.github.com/repos/netblue30/firejail/issues/208","id":312966742,"user":{"login":"gima","id":1252061,"avatar_url":"https://avatars2.githubusercontent.com/u/1252061?v=3","gravatar_id":"","url":"https://api.github.com/users/gima","html_url":"https://github.com/gima","followers_url":"https://api.github.com/users/gima/followers","following_url":"https://api.github.com/users/gima/following{/other_user}","gists_url":"https://api.github.com/users/gima/gists{/gist_id}","starred_url":"https://api.github.com/users/gima/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gima/subscriptions","organizations_url":"https://api.github.com/users/gima/orgs","repos_url":"https://api.github.com/users/gima/repos","events_url":"https://api.github.com/users/gima/events{/privacy}","received_events_url":"https://api.github.com/users/gima/received_events","type":"User","site_admin":false},"created_at":"2017-07-04T23:33:31Z","updated_at":"2017-07-04T23:33:31Z","body":"~~~\r\n$ firejail --user \r\nError: invalid --user command line option\r\n~~~ \r\n\r\nIs this feature still about to be included?\r\n\r\nMy use-case is this: I would need to overlay/bindmount a file to a directory, to which my user has no write access. I would need to use sudo to run firejail, but then the jailed executable is run as root and not as my user.\r\n\r\n*If it matters, the file in question is: /usr/lib/firefox/mozilla.cfg*"}}
{"actor":{"display_login":"gima"}}