mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #955] Spoof D-Bus machine-id #649
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#649
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @robotanarchy on GitHub (Dec 4, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/955
Hi there,
I've noticed that Tor Browser on Arch Linux requires
/etc/machine-idto be present, or otherwise it will segfault.D-Bus seems to generate this ID on the first installation and keeps it forever, to uniquely identify the machine.
http://0pointer.de/public/systemd-man/machine-id.html
How would I spoof that ID with a firejail profile in combination with
private-etc?Thanks for making firejail!
@valoq commented on GitHub (Dec 4, 2016):
Not sure how to do that with firejail.
However please report that issue to the tor people as well.
This sounds like a potentially serious flaw.
@robotanarchy commented on GitHub (Dec 4, 2016):
Tor Bugreport: https://trac.torproject.org/projects/tor/ticket/20884
@netblue30 commented on GitHub (Dec 4, 2016):
I'll put something in, and I'll ask you to try it. Will it still crash if we just put a different random number there?
@robotanarchy commented on GitHub (Dec 4, 2016):
Okay, let's do that. It did not crash when I put a different number in the file.
@netblue30 commented on GitHub (Dec 5, 2016):
All set, give it a try. A new ID is generated by default. If you need to use the real machine-id in the sandbox, you would need to add --machine-id switch.
@robotanarchy commented on GitHub (Dec 6, 2016):
Tested with the git version and works as expected - I get a random machine id every time I start the profile (verified by typing file:///etc/machine-id into the browser).
Thanks for the quick implementation!
@netblue30 commented on GitHub (Dec 8, 2016):
Cool, thanks.