[PR #5387] [MERGED] profiles: blacklist sudo/doas paths in /etc #5475

Closed
opened 2026-05-05 10:39:06 -06:00 by gitea-mirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/netblue30/firejail/pull/5387
Author: @kmk3
Created: 10/1/2022
Status: Merged
Merged: 7/14/2023
Merged by: @kmk3

Base: masterHead: dc-blacklist-sudoers


📝 Commits (1)

  • 580283d disable-common.inc: blacklist sudo/doas paths in /etc

📊 Changes

4 files changed (+6 additions, -1 deletions)

View changed files

📝 Makefile (+1 -1)
📝 etc/ids.config (+1 -0)
📝 etc/inc/disable-common.inc (+3 -0)
📝 src/jailcheck/main.c (+1 -0)

📄 Description

Commands used to find the relevant paths in /etc:

$ pacman -Qo /etc/* 2>/dev/null | grep sudo | LC_ALL=C sort
/etc/pam.d/ is owned by sudo 1.9.14.p1-1
/etc/sudo.conf is owned by sudo 1.9.14.p1-1
/etc/sudo_logsrvd.conf is owned by sudo 1.9.14.p1-1
/etc/sudoers is owned by sudo 1.9.14.p1-1
/etc/sudoers.d/ is owned by sudo 1.9.14.p1-1

Environment: Artix Linux.

Also, add missing paths sudo/doas to etc/ids.config and jailcheck.

See also commit dbebd71db ("disable-common.inc: blacklist doas binary",
2022-10-05).

Relates to #5385.

Reported-by: Dieter Plaetinck dieter@plaetinck.be


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/netblue30/firejail/pull/5387 **Author:** [@kmk3](https://github.com/kmk3) **Created:** 10/1/2022 **Status:** ✅ Merged **Merged:** 7/14/2023 **Merged by:** [@kmk3](https://github.com/kmk3) **Base:** `master` ← **Head:** `dc-blacklist-sudoers` --- ### 📝 Commits (1) - [`580283d`](https://github.com/netblue30/firejail/commit/580283d74b4e6cd425960d336cb0a5296ae36a68) disable-common.inc: blacklist sudo/doas paths in /etc ### 📊 Changes **4 files changed** (+6 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `Makefile` (+1 -1) 📝 `etc/ids.config` (+1 -0) 📝 `etc/inc/disable-common.inc` (+3 -0) 📝 `src/jailcheck/main.c` (+1 -0) </details> ### 📄 Description Commands used to find the relevant paths in /etc: $ pacman -Qo /etc/* 2>/dev/null | grep sudo | LC_ALL=C sort /etc/pam.d/ is owned by sudo 1.9.14.p1-1 /etc/sudo.conf is owned by sudo 1.9.14.p1-1 /etc/sudo_logsrvd.conf is owned by sudo 1.9.14.p1-1 /etc/sudoers is owned by sudo 1.9.14.p1-1 /etc/sudoers.d/ is owned by sudo 1.9.14.p1-1 Environment: Artix Linux. Also, add missing paths sudo/doas to etc/ids.config and jailcheck. See also commit dbebd71db ("disable-common.inc: blacklist doas binary", 2022-10-05). Relates to #5385. Reported-by: Dieter Plaetinck <dieter@plaetinck.be> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
gitea-mirror 2026-05-05 10:39:06 -06:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#5475
No description provided.