[PR #5753] [CLOSED] profiles: ssh-agent: hardening #5649

New issue

Closed

opened 2026-05-05 10:42:21 -06:00 by gitea-mirror · 0 comments

gitea-mirror commented

2026-05-05 10:42:21 -06:00

Owner

📋 Pull Request Information

Original PR: https://github.com/netblue30/firejail/pull/5753
Author: @ghost
Created: 3/25/2023
Status: ❌ Closed

Base: master ← Head: harden-ssh-agent

📝 Commits (3)

c9129aa ssh-agent: hardening
ccf395f ssh-agent: unbreak u2f and networking
0b68329 ssh-agent: avoid blacklisting /tmp/.X11-unix twice

📊 Changes

1 file changed (+25 additions, -2 deletions)

View changed files

📝 etc/profile-m-z/ssh-agent.profile (+25 -2)

📄 Description

IMO there's nothing holding back making the (OpenSSH) authenticator agent profile very tight. Contrary to the SSH client its functionality is very limited and it doesn't need access to much of the file system.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/netblue30/firejail/pull/5753 **Author:** [@ghost](https://github.com/ghost) **Created:** 3/25/2023 **Status:** ❌ Closed **Base:** `master` ← **Head:** `harden-ssh-agent` --- ### 📝 Commits (3) - [`c9129aa`](https://github.com/netblue30/firejail/commit/c9129aa17f1b6f57c57009bfacd1efc265e57e1d) ssh-agent: hardening - [`ccf395f`](https://github.com/netblue30/firejail/commit/ccf395f447d513549b04fa3674548c3b23ce5ade) ssh-agent: unbreak u2f and networking - [`0b68329`](https://github.com/netblue30/firejail/commit/0b68329a6e8a68b97889b262c7573c6f7145a0aa) ssh-agent: avoid blacklisting /tmp/.X11-unix twice ### 📊 Changes **1 file changed** (+25 additions, -2 deletions) <details> <summary>View changed files</summary> 📝 `etc/profile-m-z/ssh-agent.profile` (+25 -2) </details> ### 📄 Description IMO there's nothing holding back making the (OpenSSH) authenticator agent profile very tight. Contrary to the SSH client its functionality is very limited and it doesn't need access to much of the file system. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

gitea-mirror

2026-05-05 10:42:21 -06:00

closed this issue
added the
pull-request
label

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#5649

No description provided.

Rows
Columns