github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #3416] Busybox #2145

New issue

Closed

opened 2026-05-05 08:49:11 -06:00 by gitea-mirror · 5 comments

gitea-mirror commented

2026-05-05 08:49:11 -06:00

Owner

Originally created by @reinerh on GitHub (May 14, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3416

I just saw and #3411 and remembered that BusyBox also has a built-in shell.
But in addition to that it also has a bunch of other programs (busybox --list).
So BusyBox might be used to run programs that would otherwise be blocked.
What about blocking it by default? In the case it is needed, one can unblock it again.

Originally created by @reinerh on GitHub (May 14, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3416 I just saw and #3411 and remembered that BusyBox also has a built-in shell. But in addition to that it also has a bunch of other programs (`busybox --list`). So BusyBox might be used to run programs that would otherwise be blocked. What about blocking it by default? In the case it is needed, one can unblock it again.

gitea-mirror closed this issue

2026-05-05 08:49:12 -06:00

gitea-mirror commented

2026-05-05 08:49:14 -06:00

Author

Owner

@ghost commented on GitHub (May 15, 2020):

What about blocking it by default? In the case it is needed, one can unblock it again.

Nice catch. We could add it to disable-common.inc, which should provide broader blocking coverage than #3411 would IMO. Being a utility for rescue and embedded systems the impact of blocking busybox by default should be (very) minimal. Plus we can do that straight-away, no need to wait until @rusty-snake is ready to merge his disable-shell.inc work.

@ghost commented on GitHub (May 15, 2020): > What about blocking it by default? In the case it is needed, one can unblock it again. Nice catch. We could add it to `disable-common.inc`, which should provide broader blocking coverage than #3411 would IMO. Being a utility for rescue and embedded systems the impact of blocking busybox by default should be (very) minimal. Plus we can do that straight-away, no need to wait until @rusty-snake is ready to merge his disable-shell.inc work.

gitea-mirror commented

2026-05-05 08:49:15 -06:00

Author

Owner

@reinerh commented on GitHub (May 16, 2020):

Added in 5e2d5aa.

@reinerh commented on GitHub (May 16, 2020): Added in 5e2d5aa.

gitea-mirror commented

2026-05-05 08:49:16 -06:00

Author

Owner

@xplshn commented on GitHub (Apr 15, 2024):

Nice catch. We could add it to disable-common.inc, which should provide broader blocking coverage than https://github.com/netblue30/firejail/pull/3411 would IMO. Being a utility for rescue and embedded systems the impact of blocking busybox by default should be (very) minimal. Plus we can do that straight-away, no need to wait until @rusty-snake is ready to merge his disable-shell.inc work.

... How can I build firejail in Alpine?

@xplshn commented on GitHub (Apr 15, 2024): > Nice catch. We could add it to disable-common.inc, which should provide broader blocking coverage than https://github.com/netblue30/firejail/pull/3411 would IMO. Being a utility for rescue and embedded systems the impact of blocking busybox by default should be (very) minimal. Plus we can do that straight-away, no need to wait until @rusty-snake is ready to merge his disable-shell.inc work. ... How can I build firejail in Alpine?

gitea-mirror commented

2026-05-05 08:49:17 -06:00

Author

Owner

@kmk3 commented on GitHub (Apr 15, 2024):

... How can I build firejail in Alpine?

It's described in README.md:

https://github.com/netblue30/firejail?tab=readme-ov-file#other

See also the alpine CI job:

https://github.com/netblue30/firejail/blob/2301ab23488b9db95eba40750f355a4439468b89/.gitlab-ci.yml#L95-L110

@kmk3 commented on GitHub (Apr 15, 2024): > ... How can I build firejail in Alpine? It's described in README.md: * <https://github.com/netblue30/firejail?tab=readme-ov-file#other> See also the alpine CI job: * <https://github.com/netblue30/firejail/blob/2301ab23488b9db95eba40750f355a4439468b89/.gitlab-ci.yml#L95-L110>

gitea-mirror commented

2026-05-05 08:49:18 -06:00

Author

Owner

@xplshn commented on GitHub (Apr 15, 2024):

Sorry, didn't catch it. THanks!

@xplshn commented on GitHub (Apr 15, 2024): Sorry, didn't catch it. THanks!

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2145

No description provided.

Rows
Columns