mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #3116] --audit and shell=none #1951
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#1951
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @rusty-snake on GitHub (Jan 3, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3116
Run
firejail --profile=any-profile-that-has-shell_none --auditwill end withError: shell=none configured, but no program specified. But it is not necessary to so specify a program if the profile is given with--profileand the program is never started because of--audit.@ghost commented on GitHub (Jan 20, 2020):
I never interpreted the
--profileoption to imply a program name, it just loads a specific profile. In other words I'd consider that specific command to always be a no-op because it lacks a command (an application) the user wants to have audited. Do you regard this as a bug? I do agree that the specific error message could be more informative.@rusty-snake commented on GitHub (Jan 20, 2020):
--auditaudits the profile. => If firejail knows the profile (by adding a program name or using --profile) it can audit the profile.bug? yes.
@netblue30 commented on GitHub (Oct 1, 2020):
Fix is in, you can try it out.