[GH-ISSUE #6168] docs: mention built-in blacklists in man pages #3209

New issue

Open

opened 2026-05-05 09:49:28 -06:00 by gitea-mirror · 0 comments

gitea-mirror commented

2026-05-05 09:49:28 -06:00

Owner

Originally created by @amano-kenji on GitHub (Jan 24, 2024).
Original GitHub issue: https://github.com/netblue30/firejail/issues/6168

Description

There are hidden blacklists like /sys/module and /sys/fs.

It took a while to figure out that zfs required access to /sys/module which firejail quietly blacklisted.

Man pages should mention that --debug-blacklist can reveal those hidden blacklists.

Originally created by @amano-kenji on GitHub (Jan 24, 2024). Original GitHub issue: https://github.com/netblue30/firejail/issues/6168 ### Description There are hidden blacklists like `/sys/module` and `/sys/fs`. It took a while to figure out that `zfs` required access to `/sys/module` which firejail quietly blacklisted. Man pages should mention that `--debug-blacklist` can reveal those hidden blacklists.