mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #5195] firejail always creates an empty .zshrc #2910
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#2910
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @blastrock on GitHub (Jun 12, 2022).
Original GitHub issue: https://github.com/netblue30/firejail/issues/5195
Description
Firejail always create an empty .zshrc file in the sandboxed home, even if the file is whitelisted.
Steps to Reproduce
Steps to reproduce the behavior
whitelist-ro ~/.config(or any other file/dir)LC_ALL=C firejail --profile=prof ls -laAlternative:
whitelist-ro ~/.zshrcLC_ALL=C firejail --profile=prof ls -laExpected behavior
If the profile does not mention .zshrc, the file shouldn't exist.
Moreover, if we whitelist .zshrc, the host file should be mounted, not an empty one (and this is my main issue).
Actual behavior
Whatever I do, an empty .zshrc file is created.
Additional context
Running with --debug does not output anything about that .zshrc in the first case. And it writes that it binds it as requested in the second case.
Environment
Checklist
/usr/bin/vlc) "fixes" it).https://github.com/netblue30/firejail/issues/1139)browser-allow-drm yes/browser-disable-u2f noinfirejail.configto allow DRM/U2F in browsers.--profile=PROFILENAMEto set the right profile. (Only relevant for AppImages)Log
Output of
LC_ALL=C firejail --profile=prof --debug ls -la@rusty-snake commented on GitHub (Jun 12, 2022):
Maybe related: #1127
What changes using
shell none?@blastrock commented on GitHub (Jun 12, 2022):
It does work as expected with
--shell=none! No .zshrc is created, and if I whitelist it, it's not overwritten.I think this is still a bug, but the workaround helps, thanks :)
@rusty-snake commented on GitHub (Jun 12, 2022):
FTR: IMHO we should just make
shell nonethe default (#3434).@rusty-snake commented on GitHub (Jun 20, 2022):
shell nonebecomes default (#5196).