[PR #6257] [MERGED] profiles: deny access to ~/.config/autostart #5911

Closed
opened 2026-05-05 10:47:12 -06:00 by gitea-mirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/netblue30/firejail/pull/6257
Author: @kmk3
Created: 3/2/2024
Status: Merged
Merged: 3/24/2024
Merged by: @kmk3

Base: masterHead: profiles-deny-autostart


📝 Commits (1)

  • 6e29e58 profiles: deny access to ~/.config/autostart

📊 Changes

3 files changed (+16 additions, -7 deletions)

View changed files

📝 etc/profile-a-l/dropbox.profile (+6 -3)
📝 etc/profile-a-l/gitter.profile (+5 -2)
📝 etc/profile-m-z/meteo-qt.profile (+5 -2)

📄 Description

The files in this directory are intended to be automatically executed
when the user logs in.

In which case, granting write access to this directory allows the
program to easily escape the sandbox (by autostarting itself outside of
firejail, for example).

Misc: This was noticed on #6244.


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/netblue30/firejail/pull/6257 **Author:** [@kmk3](https://github.com/kmk3) **Created:** 3/2/2024 **Status:** ✅ Merged **Merged:** 3/24/2024 **Merged by:** [@kmk3](https://github.com/kmk3) **Base:** `master` ← **Head:** `profiles-deny-autostart` --- ### 📝 Commits (1) - [`6e29e58`](https://github.com/netblue30/firejail/commit/6e29e58805f749a8755fa74902cb81e661e5c992) profiles: deny access to ~/.config/autostart ### 📊 Changes **3 files changed** (+16 additions, -7 deletions) <details> <summary>View changed files</summary> 📝 `etc/profile-a-l/dropbox.profile` (+6 -3) 📝 `etc/profile-a-l/gitter.profile` (+5 -2) 📝 `etc/profile-m-z/meteo-qt.profile` (+5 -2) </details> ### 📄 Description The files in this directory are intended to be automatically executed when the user logs in. In which case, granting write access to this directory allows the program to easily escape the sandbox (by autostarting itself outside of firejail, for example). Misc: This was noticed on #6244. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
gitea-mirror 2026-05-05 10:47:12 -06:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#5911
No description provided.