[GH-ISSUE #105] Symlink handling #64

Closed
opened 2026-05-05 04:56:11 -06:00 by gitea-mirror · 6 comments
Owner

Originally created by @blueyed on GitHub (Oct 28, 2015).
Original GitHub issue: https://github.com/netblue30/firejail/issues/105

The Vimperator addon uses ~/.vimperatorrc and ~/.vimperator/, which should be added to the whitelist.

However, I am using symlinks for those to the file/folder in ~/.dotfiles, and whitelisting seems to only add the target.

I think it should add both the symlink and the target.

As a side note: adding both the link and the target of the folder will result in an error:

Whitelisting /home/user/.dotfiles/vimperatorrc
Whitelisting /home/user/.dotfiles/vimperator
Whitelisting /home/user/.dotfiles/vimperator
Error mkdir:whitelist_path(99): File exists
Originally created by @blueyed on GitHub (Oct 28, 2015). Original GitHub issue: https://github.com/netblue30/firejail/issues/105 The Vimperator addon uses `~/.vimperatorrc` and `~/.vimperator/`, which should be added to the whitelist. However, I am using symlinks for those to the file/folder in `~/.dotfiles`, and whitelisting seems to only add the target. I think it should add both the symlink and the target. As a side note: adding both the link and the target of the folder will result in an error: ``` Whitelisting /home/user/.dotfiles/vimperatorrc Whitelisting /home/user/.dotfiles/vimperator Whitelisting /home/user/.dotfiles/vimperator Error mkdir:whitelist_path(99): File exists ```
gitea-mirror 2026-05-05 04:56:11 -06:00
Author
Owner

@blueyed commented on GitHub (Oct 28, 2015):

For some reason this also caused the ~/.dotfiles/vimperatorrc file to get emptied!

That happened at 01:41:34.245112301 (timestamp of the zero-byte file), apparently when starting firefox through firejail on 01:41:34.225 (which ran for a while). I don't know what whitelist config I was using in that case, but either firejail emptied it (unlikely?), or Vimperator assumed that there is none?! - but that should probably not cause it to create an empty one (but I don't know).

<!-- gh-comment-id:151693332 --> @blueyed commented on GitHub (Oct 28, 2015): For some reason this also caused the `~/.dotfiles/vimperatorrc` file to get emptied! That happened at `01:41:34.245112301` (timestamp of the zero-byte file), apparently when starting firefox through firejail on 01:41:34.225 (which ran for a while). I don't know what whitelist config I was using in that case, but either firejail emptied it (unlikely?), or Vimperator assumed that there is none?! - but that should probably not cause it to create an empty one (but I don't know).
Author
Owner

@netblue30 commented on GitHub (Oct 28, 2015):

Vimperator is in, I'll fix the simlinks. Thanks.

<!-- gh-comment-id:151809628 --> @netblue30 commented on GitHub (Oct 28, 2015): Vimperator is in, I'll fix the simlinks. Thanks.
Author
Owner

@reinerh commented on GitHub (Oct 30, 2015):

There is a vimperator-fork called pentadactyl that has similar files/dirs that should be whitelisted: ~/.pentadactylrc and ~/.pentadactyl/

<!-- gh-comment-id:152620886 --> @reinerh commented on GitHub (Oct 30, 2015): There is a vimperator-fork called pentadactyl that has similar files/dirs that should be whitelisted: ~/.pentadactylrc and ~/.pentadactyl/
Author
Owner

@blueyed commented on GitHub (Oct 30, 2015):

@reinerh
👍

<!-- gh-comment-id:152635259 --> @blueyed commented on GitHub (Oct 30, 2015): @reinerh :+1:
Author
Owner

@netblue30 commented on GitHub (Oct 31, 2015):

Pentadactyl is in, thanks!

<!-- gh-comment-id:152734666 --> @netblue30 commented on GitHub (Oct 31, 2015): Pentadactyl is in, thanks!
Author
Owner

@netblue30 commented on GitHub (Nov 11, 2015):

Fixed.

<!-- gh-comment-id:155856578 --> @netblue30 commented on GitHub (Nov 11, 2015): Fixed.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#64
No description provided.