github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

devlog #2247

New issue

Closed

opened 2026-05-05 08:56:21 -06:00 by gitea-mirror · 3 comments

gitea-mirror commented

2026-05-05 08:56:21 -06:00

Owner

Originally created by @sfc-gh-jdu on GitHub (Aug 12, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3584

Hello, can we add an option to disable the access to syslog, i.e., /run/firejail/mnt/devlog? It seems now the firejail creates a mount (dev/log) agains devlog.

(in src/firejail/fs_dev.c)

        // create DEVLOG_FILE
	int have_devlog = 0;
	struct stat s;
	if (stat("/dev/log", &s) == 0) {
		have_devlog = 1;
		FILE *fp = fopen(RUN_DEVLOG_FILE, "w");
		if (!fp)
			have_devlog = 0;
		else {
			fprintf(fp, "\n");
			fclose(fp);
			if (mount("/dev/log", RUN_DEVLOG_FILE, NULL, MS_BIND|MS_REC, NULL) < 0)
				errExit("mounting /dev/log");
		}
	}

Thanks!

Originally created by @sfc-gh-jdu on GitHub (Aug 12, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3584 Hello, can we add an option to disable the access to syslog, i.e., /run/firejail/mnt/devlog? It seems now the firejail creates a mount (dev/log) agains devlog. (in src/firejail/fs_dev.c) ``` // create DEVLOG_FILE int have_devlog = 0; struct stat s; if (stat("/dev/log", &s) == 0) { have_devlog = 1; FILE *fp = fopen(RUN_DEVLOG_FILE, "w"); if (!fp) have_devlog = 0; else { fprintf(fp, "\n"); fclose(fp); if (mount("/dev/log", RUN_DEVLOG_FILE, NULL, MS_BIND|MS_REC, NULL) < 0) errExit("mounting /dev/log"); } } ``` Thanks!

gitea-mirror

2026-05-05 08:56:21 -06:00

closed this issue
added the
enhancement
label

gitea-mirror commented

2026-05-05 08:56:24 -06:00

Author

Owner

@rusty-snake commented on GitHub (Aug 13, 2020):

What about blacklist /dev/log?

@rusty-snake commented on GitHub (Aug 13, 2020): What about `blacklist /dev/log`?

gitea-mirror commented

2026-05-05 08:56:25 -06:00

Author

Owner

@smitsohu commented on GitHub (Aug 28, 2020):

Let's blacklist it always.

@smitsohu commented on GitHub (Aug 28, 2020): Let's blacklist it always.

gitea-mirror commented

2026-05-05 08:56:26 -06:00

Author

Owner

@smitsohu commented on GitHub (Aug 28, 2020):

Let's blacklist it always.

I meant the temporary location /run/firejail/mnt/devlog that was indicated in the issue title.

If you don't need /dev/log, you can just blacklist it as usual, as @rusty-snake said.

@smitsohu commented on GitHub (Aug 28, 2020): > Let's blacklist it always. I meant the temporary location /run/firejail/mnt/devlog that was indicated in the issue title. If you don't need /dev/log, you can just blacklist it as usual, as @rusty-snake said.

gitea-mirror referenced this issue

2026-05-05 10:16:17 -06:00

[PR #2247] [MERGED] Add new config option to disable U2F in browsers, enabled by default #4235

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2247

No description provided.

Rows
Columns