[GH-ISSUE #6487] Host file managers cannot find files in sandbox /proc with --private #3291

Open
opened 2026-05-05 09:53:36 -06:00 by gitea-mirror · 3 comments
Owner

Originally created by @ghost on GitHub (Sep 26, 2024).
Original GitHub issue: https://github.com/netblue30/firejail/issues/6487

While using --private --noprofile parameters, any downloaded files in sandbox are invisible for Host file managers

find /proc|grep filename

can't find the file.

Originally created by @ghost on GitHub (Sep 26, 2024). Original GitHub issue: https://github.com/netblue30/firejail/issues/6487 While using --private --noprofile parameters, any downloaded files in sandbox are invisible for Host file managers ~~~ find /proc|grep filename ~~~ can't find the file.
gitea-mirror added the
needinfo
file-transfer
labels 2026-05-05 09:53:36 -06:00
Author
Owner

@rusty-snake commented on GitHub (Sep 26, 2024):

Your post lists a few facts, but no question or request. So what do you want?

While using --private --noprofile parameters, any downloaded files in sandbox are invisible for Host file managers

Expected.

can't find the file.

procfs and magic symlinks are a crazy, confusing thing. If you think find / grep has a bug, report it to them.

Also where do you expect the file to be found in proc? In /proc/<pid>/fd? In /proc/<pid>/fdinfo?

<!-- gh-comment-id:2376762333 --> @rusty-snake commented on GitHub (Sep 26, 2024): Your post lists a few facts, but no question or request. So what do you want? > While using --private --noprofile parameters, any downloaded files in sandbox are invisible for Host file managers Expected. > can't find the file. procfs and magic symlinks are a crazy, confusing thing. If you think find / grep has a bug, report it to them. Also where do you expect the file to be found in proc? In `/proc/<pid>/fd`? In `/proc/<pid>/fdinfo`?
Author
Owner

@kmk3 commented on GitHub (Sep 26, 2024):

Basic debugging information is missing; please follow the bug report template:

<!-- gh-comment-id:2377117587 --> @kmk3 commented on GitHub (Sep 26, 2024): Basic debugging information is missing; please follow the bug report template: * <https://github.com/netblue30/firejail/issues/new?template=bug_report.md>
Author
Owner

@kmk3 commented on GitHub (Sep 26, 2024):

While using --private --noprofile parameters, any downloaded files in sandbox
are invisible for Host file managers

This is the expected behavior of --private.

To transfer files from the sandbox, see --get= and FILE TRANSFER in man firejail.

Alternatively, use --private=foo or whitelist the paths that you need instead
of using --private.

See also:

<!-- gh-comment-id:2377144868 --> @kmk3 commented on GitHub (Sep 26, 2024): > While using --private --noprofile parameters, any downloaded files in sandbox > are invisible for Host file managers This is the expected behavior of `--private`. To transfer files from the sandbox, see `--get=` and `FILE TRANSFER` in `man firejail`. Alternatively, use `--private=foo` or whitelist the paths that you need instead of using `--private`. See also: * #4746
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3291
No description provided.