github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

1000 #3274

New issue

Closed

opened 2026-05-05 09:52:52 -06:00 by gitea-mirror · 4 comments

gitea-mirror commented

2026-05-05 09:52:52 -06:00

Owner

Originally created by @Utini2000 on GitHub (Aug 23, 2024).
Original GitHub issue: https://github.com/netblue30/firejail/issues/6445

Hi all,

I noticed that jailcheck reports for firefox with the stock firefox.profile (not modifications):

68426:username::/usr/bin/firejail /usr/bin/firefox 
   Virtual dirs: /home/username, /tmp, /var/tmp, /dev, /usr/share, 
                 /run/user/1000, 
   Warning: I can run programs in /run/user/1000
   Networking: enabled

I think this might be due using PSD (profile daemon sync) and having the whole firefox profile in tmpfs.
Adding "noexec /run/user/1000/" didn't help.

But I guess it should not be possible for firefox to exec something in /run/user/1000/ for security reasons?

Originally created by @Utini2000 on GitHub (Aug 23, 2024). Original GitHub issue: https://github.com/netblue30/firejail/issues/6445 Hi all, I noticed that jailcheck reports for firefox with the stock firefox.profile (not modifications): ``` 68426:username::/usr/bin/firejail /usr/bin/firefox Virtual dirs: /home/username, /tmp, /var/tmp, /dev, /usr/share, /run/user/1000, Warning: I can run programs in /run/user/1000 Networking: enabled ``` I think this might be due using PSD (profile daemon sync) and having the whole firefox profile in tmpfs. Adding "noexec /run/user/1000/" didn't help. But I guess it should not be possible for firefox to exec something in /run/user/1000/ for security reasons?

gitea-mirror

2026-05-05 09:52:52 -06:00

closed this issue
added the
notabug
label

gitea-mirror commented

2026-05-05 09:52:54 -06:00

Author

Owner

@rusty-snake commented on GitHub (Aug 23, 2024):

e8b693c814/etc/profile-a-l/firefox-common.profile (L12)

@rusty-snake commented on GitHub (Aug 23, 2024): https://github.com/netblue30/firejail/blob/e8b693c814a4e157bcae6f5c60d1624d185d8837/etc/profile-a-l/firefox-common.profile#L12

gitea-mirror commented

2026-05-05 09:52:55 -06:00

Author

Owner

@Utini2000 commented on GitHub (Aug 24, 2024):

@rusty-snake thanks for the hint! I can't recall enabling it manually, shouldn't it be disabled out of the box for security reasons?

@Utini2000 commented on GitHub (Aug 24, 2024): @rusty-snake thanks for the hint! I can't recall enabling it manually, shouldn't it be disabled out of the box for security reasons?

gitea-mirror commented

2026-05-05 09:52:56 -06:00

Author

Owner

@rusty-snake commented on GitHub (Aug 24, 2024):

It is disabled by default e8b693c814/etc/firejail.config (L22-L23)

@rusty-snake commented on GitHub (Aug 24, 2024): It is disabled by default https://github.com/netblue30/firejail/blob/e8b693c814a4e157bcae6f5c60d1624d185d8837/etc/firejail.config#L22-L23

gitea-mirror commented

2026-05-05 09:52:57 -06:00

Author

Owner

@Utini2000 commented on GitHub (Aug 28, 2024):

Thanks!

@Utini2000 commented on GitHub (Aug 28, 2024): Thanks!

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3274

No description provided.

Rows
Columns