Why is there a conflict? When we use it online, some users can use it, but some users cannot use it after releasing their permissions.

[wenchaun2]

Why do we have the same configuration and the same situation, but some are allowed to pass and some are permession denied?

N表示访问失败，Y表示访问成功

50 65908 20250109-133841-d79451bdc32c 1791 65908 1737615331647 1737615397555 N application_1736155316820_89990 22 14 AnalysisException: Table or view not found: bi.v_appr_cust; line 8 pos 5;
51 66164 20250109-131231-9c9df318a747 2050 66164 1737615331647 1737615397811 N application_1736155316820_89999 21 0 AnalysisException: Table or view not found: bi.personal_info; line 15 pos 10;
52 66400 20250109-134948-5297866a63d3 2050 66399 1737615331647 1737615398046 N application_1736155316820_89986 20 14 AnalysisException: Table or view not found: bi.personal_info; line 5 pos 5;
53 68873 20250109-134919-707d18523257 2125 68873 1737615331647 1737615400520 Y application_1736155316820_89992 19 14
54 72570 20250109-113355-e2272980a5ba 1718 72570 1737615331647 1737615404217 Y application_1736155316820_89997 18 0
55 80300 20250109-132739-1a9c50b9f47c 1573 80300 1737615331647 1737615411947 Y application_1736155316820_89988 17 0
56 80853 20250109-111942-3d03a020fdf2 1551 80853 1737615331647 1737615412500 Y application_1736155316820_90000 16 0

[kmk3]

Basic debugging information is missing; please follow the bug report template:

• https://github.com/netblue30/firejail/issues/new?template=bug_report.md

[wenchaun2]

When using the sandbox environment, during offline testing, for multiple users, by writing a python script to test, some users are effective and some are not. Has this situation occurred before during the use of firejial? What are the reasons for the failure of filejial? The previous test file mounting method will cause failure

[wenchaun2]

Set the configuration file like this. The configuration file will be dynamically generated according to different users. One user can belong to multiple teams.

The configuration file is as follows：

include /etc/firejail/disable-common.inc
include /etc/firejail/disable-programs.inc

read-only /home/hadoop

noblacklist {basicPath}/{team}
blacklist {basicPath}/*

noblacklist {basicPath}/{team}/User
noblacklist {basicPath}/{team}/Team
blacklist {basicPath}/{team}/*

noblacklist {basicPath}/{team}/User/{user}
blacklist {basicPath}/{team}/User/*