[GH-ISSUE #1001] blacklist /mnt by default #684

New issue

Closed

opened 2026-05-05 06:26:34 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 06:26:34 -06:00

Owner

Originally created by @thewisenerd on GitHub (Dec 23, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1001

/mnt directory is not blacklisted by default and this usually has mounted filesystems. should firejail consider blacklisting it by default, and have applications request whitelisting it if (and only if) necessary?

Originally created by @thewisenerd on GitHub (Dec 23, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/1001 ```/mnt``` directory is not blacklisted by default and this usually has mounted filesystems. should firejail consider blacklisting it by default, and have applications request whitelisting it if (and only if) necessary?

gitea-mirror

2026-05-05 06:26:34 -06:00

closed this issue
added the
enhancement
label

gitea-mirror commented

2026-05-05 06:26:40 -06:00

Author

Owner

@netblue30 commented on GitHub (Dec 27, 2016):

No, we cannot do it. We can only blacklist/whitelist by default directories and files we know about. For example we blacklist /boot because we can access it by default and some of the files there are very bad. For /mnt or /media is different, the user can have mounted there anything.

I'll add an option in /etc/firejail/firejail.config to disable globally /mnt, /media and /run/media.

@netblue30 commented on GitHub (Dec 27, 2016): No, we cannot do it. We can only blacklist/whitelist by default directories and files we know about. For example we blacklist /boot because we can access it by default and some of the files there are very bad. For /mnt or /media is different, the user can have mounted there anything. I'll add an option in /etc/firejail/firejail.config to disable globally /mnt, /media and /run/media.

gitea-mirror commented

2026-05-05 06:26:42 -06:00

Author

Owner

@netblue30 commented on GitHub (Mar 10, 2017):

Added "disable-mnt yes/no" config option in /etc/firejail/firejail.config file.

@netblue30 commented on GitHub (Mar 10, 2017): Added "disable-mnt yes/no" config option in /etc/firejail/firejail.config file.

gitea-mirror referenced this issue

2026-05-05 10:06:34 -06:00

[PR #684] [MERGED] Checkmate #3715

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#684

No description provided.

Rows
Columns