[PR #3896] [MERGED] Add new allow include allow-bin-sh.inc #4934

Closed
opened 2026-05-05 10:29:17 -06:00 by gitea-mirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/netblue30/firejail/pull/3896
Author: @rusty-snake
Created: 1/15/2021
Status: Merged
Merged: 1/16/2021
Merged by: @rusty-snake

Base: masterHead: allow-bin-sh.inc


📝 Commits (1)

  • 8c66258 Add new allow include allow-bin-sh.inc

📊 Changes

3 files changed (+9 additions, -4 deletions)

View changed files

etc/inc/allow-bin-sh.inc (+7 -0)
📝 etc/profile-m-z/mpv.profile (+1 -1)
📝 etc/profile-m-z/nodejs-common.profile (+1 -3)

📄 Description

/bin/sh is usually just a symlink to bash. However this is not the case
for every distro, debian for example uses dash. bash,dash and sh have a
blacklist command in disable-shell.inc. An own allow-*.inc for it
enusres usage of all necessary nolacklists.

For private-bin sh is enough because it follows symlinks.


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/netblue30/firejail/pull/3896 **Author:** [@rusty-snake](https://github.com/rusty-snake) **Created:** 1/15/2021 **Status:** ✅ Merged **Merged:** 1/16/2021 **Merged by:** [@rusty-snake](https://github.com/rusty-snake) **Base:** `master` ← **Head:** `allow-bin-sh.inc` --- ### 📝 Commits (1) - [`8c66258`](https://github.com/netblue30/firejail/commit/8c66258a90551230de6e6bb9a65b151f42caf32f) Add new allow include allow-bin-sh.inc ### 📊 Changes **3 files changed** (+9 additions, -4 deletions) <details> <summary>View changed files</summary> ➕ `etc/inc/allow-bin-sh.inc` (+7 -0) 📝 `etc/profile-m-z/mpv.profile` (+1 -1) 📝 `etc/profile-m-z/nodejs-common.profile` (+1 -3) </details> ### 📄 Description /bin/sh is usually just a symlink to bash. However this is not the case for every distro, debian for example uses dash. bash,dash and sh have a blacklist command in disable-shell.inc. An own allow-*.inc for it enusres usage of all necessary nolacklists. For private-bin sh is enough because it follows symlinks. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
gitea-mirror 2026-05-05 10:29:17 -06:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#4934
No description provided.