github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

sbin not blacklisted #38

New issue

Closed

opened 2026-05-05 04:50:07 -06:00 by gitea-mirror · 3 comments

gitea-mirror commented

2026-05-05 04:50:07 -06:00

Owner

Originally created by @curiosity-seeker on GitHub (Sep 25, 2015).
Original GitHub issue: https://github.com/netblue30/firejail/issues/68

I just executed Firefox in the console and got this:

firejail firefox
Reading profile /home/xxx/.config/firejail/firefox.profile
Reading profile /home/xxx/.config/firejail/myrules.inc
Reading profile /etc/firejail/disable-mgmt.inc
Reading profile /etc/firejail/disable-secret.inc
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-history.inc
Warning: user namespaces not available in the current kernel.
Parent pid 2318, child pid 2319
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted

I got the same problem when I executed any other firejailed application. (That user namespaces are not suuported is normal as I'm using Arch Linux). Something is wrong here ...

Originally created by @curiosity-seeker on GitHub (Sep 25, 2015). Original GitHub issue: https://github.com/netblue30/firejail/issues/68 I just executed Firefox in the console and got this: > firejail firefox > Reading profile /home/xxx/.config/firejail/firefox.profile > Reading profile /home/xxx/.config/firejail/myrules.inc > Reading profile /etc/firejail/disable-mgmt.inc > Reading profile /etc/firejail/disable-secret.inc > Reading profile /etc/firejail/disable-common.inc > Reading profile /etc/firejail/disable-history.inc > Warning: user namespaces not available in the current kernel. > Parent pid 2318, child pid 2319 > Warning: /sbin directory link was not blacklisted > Warning: /usr/sbin directory link was not blacklisted I got the same problem when I executed any other firejailed application. (That user namespaces are not suuported is normal as I'm using Arch Linux). Something is wrong here ...

gitea-mirror closed this issue

2026-05-05 04:50:12 -06:00

gitea-mirror commented

2026-05-05 04:50:15 -06:00

Author

Owner

@bchretien commented on GitHub (Sep 26, 2015):

On Arch, all the system bin directories point to /usr/bin:

/bin -> /usr/bin
/sbin -> /usr/bin
/usr/sbin -> /usr/bin

And it seems to be the reason for this warning (cf. here).

@bchretien commented on GitHub (Sep 26, 2015): On Arch, all the system bin directories point to `/usr/bin`: `/bin -> /usr/bin` `/sbin -> /usr/bin` `/usr/sbin -> /usr/bin` And it seems to be the reason for this warning (cf. [here](https://github.com/netblue30/firejail/blob/491b8f2390c456d55ad49c333c1cc42cf7dd116e/src/firejail/fs.c#L157-L161)).

gitea-mirror commented

2026-05-05 04:50:20 -06:00

Author

Owner

@netblue30 commented on GitHub (Sep 26, 2015):

Yes, I had to disable the blacklisting. It affects Arch, Fedora, RHEL.

@netblue30 commented on GitHub (Sep 26, 2015): Yes, I had to disable the blacklisting. It affects Arch, Fedora, RHEL.

gitea-mirror commented

2026-05-05 04:50:25 -06:00

Author

Owner

@curiosity-seeker commented on GitHub (Sep 28, 2015):

I understand. Thanks for this hint!

@curiosity-seeker commented on GitHub (Sep 28, 2015): I understand. Thanks for this hint!

gitea-mirror referenced this issue

2026-05-05 10:02:56 -06:00

[PR #38] [MERGED] Fix arguments passed to child process during execvp in --shell=none mode #3520

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#38

No description provided.

Rows
Columns