[PR #2845] [MERGED] improve support for home directories outside /home #4555

Closed
opened 2026-05-05 10:22:18 -06:00 by gitea-mirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/netblue30/firejail/pull/2845
Author: @smitsohu
Created: 7/9/2019
Status: Merged
Merged: 7/9/2019
Merged by: @netblue30

Base: masterHead: homedir2


📝 Commits (3)

  • 8bff773 add symlink resolution for home directories
  • 74e5911 move to fd based homedir mounts
  • 9b2bbfc main.c: define O_PATH (CentOS 6 fix)

📊 Changes

8 files changed (+135 additions, -45 deletions)

View changed files

📝 etc/firejail.config (+3 -0)
📝 src/firejail/checkcfg.c (+2 -0)
📝 src/firejail/firejail.h (+1 -0)
📝 src/firejail/fs.c (+4 -5)
📝 src/firejail/fs_home.c (+59 -29)
📝 src/firejail/fs_whitelist.c (+9 -1)
📝 src/firejail/main.c (+43 -8)
📝 src/firejail/restrict_users.c (+14 -2)

📄 Description

whitelisting is still half broken in some cases (when home directory is in one of the other allowed top level directories), but the workarounds are getting easier :)


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/netblue30/firejail/pull/2845 **Author:** [@smitsohu](https://github.com/smitsohu) **Created:** 7/9/2019 **Status:** ✅ Merged **Merged:** 7/9/2019 **Merged by:** [@netblue30](https://github.com/netblue30) **Base:** `master` ← **Head:** `homedir2` --- ### 📝 Commits (3) - [`8bff773`](https://github.com/netblue30/firejail/commit/8bff773d6a7bf70c97b3d5b751df9ec0dd6c8b5d) add symlink resolution for home directories - [`74e5911`](https://github.com/netblue30/firejail/commit/74e5911806d6f456819c65db37b0e29bc1f402d7) move to fd based homedir mounts - [`9b2bbfc`](https://github.com/netblue30/firejail/commit/9b2bbfcc3184c26b8dda926b2709822015742093) main.c: define O_PATH (CentOS 6 fix) ### 📊 Changes **8 files changed** (+135 additions, -45 deletions) <details> <summary>View changed files</summary> 📝 `etc/firejail.config` (+3 -0) 📝 `src/firejail/checkcfg.c` (+2 -0) 📝 `src/firejail/firejail.h` (+1 -0) 📝 `src/firejail/fs.c` (+4 -5) 📝 `src/firejail/fs_home.c` (+59 -29) 📝 `src/firejail/fs_whitelist.c` (+9 -1) 📝 `src/firejail/main.c` (+43 -8) 📝 `src/firejail/restrict_users.c` (+14 -2) </details> ### 📄 Description whitelisting is still half broken in some cases (when home directory is in one of the other allowed top level directories), but the workarounds are getting easier :) --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
gitea-mirror 2026-05-05 10:22:18 -06:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#4555
No description provided.