[GH-ISSUE #1071] Per directory overlayfs filesystems? #727

New issue

Closed

opened 2026-05-05 06:32:14 -06:00 by gitea-mirror · 1 comment

gitea-mirror commented

2026-05-05 06:32:14 -06:00

Owner

Originally created by @talwrii on GitHub (Jan 24, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1071

I'm happily misusing firejail to sandbox zsh.

One use case is distrusting code that I clone off the internet. For this purpose I create a firejail where

Important information is private
The cloned directory is writeable
I have read-only access to configuration files for things like git / programming tools

One problem I get is that some of my zsh plugins want to write to files. An ideal solution here would be give them an overlayfs to write into. However, I don't want an overlayfs everywhere (my experience profiles is that I tend to try to use shells for things that I'm not meant to unless there's something to stop me, so I would happily try to make changes to the overlayfs shell that then get lost).

One solution is the have something like --overlay-dir=blah so that I can turn overlays on and off in a fine-grained fashion.

Opinions?

Originally created by @talwrii on GitHub (Jan 24, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1071 I'm happily misusing firejail to sandbox zsh. One use case is distrusting code that I clone off the internet. For this purpose I create a firejail where * Important information is private * The cloned directory is writeable * I have read-only access to configuration files for things like git / programming tools One problem I get is that some of my zsh plugins want to write to files. An ideal solution here would be give them an overlayfs to write into. However, I don't want an overlayfs everywhere (my experience profiles is that I tend to try to use shells for things that I'm not meant to unless there's something to stop me, so I would happily try to make changes to the overlayfs shell that then get lost). One solution is the have something like `--overlay-dir=blah` so that I can turn overlays on and off in a fine-grained fashion. Opinions?

gitea-mirror

2026-05-05 06:32:14 -06:00

closed this issue
added the
enhancement
label

gitea-mirror commented

2026-05-05 06:32:20 -06:00

Author

Owner

@netblue30 commented on GitHub (Jan 25, 2017):

--overlay-dir will be!

@netblue30 commented on GitHub (Jan 25, 2017): --overlay-dir will be!

gitea-mirror referenced this issue

2026-05-05 10:06:55 -06:00

[PR #727] [MERGED] Small fixes (icecat.profile, disable-common.inc and whitelist-common.inc) #3733

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#727

No description provided.

Rows
Columns