[GH-ISSUE #333] [enhancement] Better handle symlinks in /usr/bin #237

Closed
opened 2026-05-05 05:23:44 -06:00 by gitea-mirror · 3 comments
Owner

Originally created by @chiraag-nataraj on GitHub (Feb 28, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/333

Right now, private-bin's behavior when it comes to symlinked binaries is less than ideal - for example, firefox will refuse to start with "Unable to find Mozilla runtime" and libreoffice just doesn't start (not many error messages). Both of these issues have to do with the fact that when you whitelist symlinked binaries, the symlinks aren't copied as-is - instead, the linked binary itself is copied. Copying the symlink itself would solve the problem, at least with those two programs.

Originally created by @chiraag-nataraj on GitHub (Feb 28, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/333 Right now, private-bin's behavior when it comes to symlinked binaries is less than ideal - for example, firefox will refuse to start with "Unable to find Mozilla runtime" and libreoffice just doesn't start (not many error messages). Both of these issues have to do with the fact that when you whitelist symlinked binaries, the symlinks aren't copied as-is - instead, the linked binary itself is copied. Copying the symlink itself would solve the problem, at least with those two programs.
gitea-mirror 2026-05-05 05:23:44 -06:00
Author
Owner

@chiraag-nataraj commented on GitHub (Feb 28, 2016):

I understand that technically this may break the symlink (say, if the symlink is to a blacklisted directory), but that should be up to the user to figure out/manage (and shouldn't happen in the vast majority of cases anyway).

<!-- gh-comment-id:189880297 --> @chiraag-nataraj commented on GitHub (Feb 28, 2016): I understand that technically this may break the symlink (say, if the symlink is to a blacklisted directory), but that should be up to the user to figure out/manage (and shouldn't happen in the vast majority of cases anyway).
Author
Owner

@netblue30 commented on GitHub (Mar 20, 2016):

Fixed!

<!-- gh-comment-id:198932031 --> @netblue30 commented on GitHub (Mar 20, 2016): Fixed!
Author
Owner

@chiraag-nataraj commented on GitHub (Mar 21, 2016):

Awesome! Thanks!

<!-- gh-comment-id:199100576 --> @chiraag-nataraj commented on GitHub (Mar 21, 2016): Awesome! Thanks!
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#237
No description provided.