[PR #5388] docs: clarify filesystem directives #5476

New issue

Open

opened 2026-05-05 10:39:06 -06:00 by gitea-mirror · 0 comments

gitea-mirror commented

2026-05-05 10:39:06 -06:00

Owner

📋 Pull Request Information

Original PR: https://github.com/netblue30/firejail/pull/5388
Author: @Dieterbe
Created: 10/1/2022
Status: 🔄 Open

Base: master ← Head: clarify-filesystem

📝 Commits (2)

9ae9442 clarify filesystem directives
9d8ee17 address feedback

📊 Changes

1 file changed (+17 additions, -1 deletions)

View changed files

📝 src/man/firejail-profile.txt (+17 -1)

📄 Description

i've been doing a bunch of experimenting in an attempt to clarify the specifics of what happens to files and directories in light of the various filesystem directives.

i have some simple shell scripts that test all the different scenarios with different profiles. If desired, I can share those too. (they're quite basic)
The only thing I'm not sure of is whether i/o operations might start working on blacklisted files/dirs when they are executed as root. I presume no, but I don't have time now to conduct such as experiment to make sure.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/netblue30/firejail/pull/5388 **Author:** [@Dieterbe](https://github.com/Dieterbe) **Created:** 10/1/2022 **Status:** 🔄 Open **Base:** `master` ← **Head:** `clarify-filesystem` --- ### 📝 Commits (2) - [`9ae9442`](https://github.com/netblue30/firejail/commit/9ae94426721f8d722b5db9c9ddc519575b829a6d) clarify filesystem directives - [`9d8ee17`](https://github.com/netblue30/firejail/commit/9d8ee1717564c2efbf05a69242111ca2c6b8eb17) address feedback ### 📊 Changes **1 file changed** (+17 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `src/man/firejail-profile.txt` (+17 -1) </details> ### 📄 Description i've been doing a bunch of experimenting in an attempt to clarify the specifics of what happens to files and directories in light of the various filesystem directives. i have some simple shell scripts that test all the different scenarios with different profiles. If desired, I can share those too. (they're quite basic) The only thing I'm not sure of is whether i/o operations might start working on blacklisted files/dirs when they are executed as root. I presume no, but I don't have time now to conduct such as experiment to make sure. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>