github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #1086] Default ssh profile prevents ProxyJump #742

New issue

Closed

opened 2026-05-05 06:33:24 -06:00 by gitea-mirror · 4 comments

gitea-mirror commented

2026-05-05 06:33:24 -06:00

Owner

Originally created by @ghost on GitHub (Feb 2, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1086

With the default ssh profile enabled, the following command fails:

ssh -J host1 host2

the error messages are

Redirecting symlink to /usr/bin/ssh
Warning: cannot switch euid to root
Warning: cannot switch egid to root
Warning: cannot switch euid to root
Warning: cannot switch egid to root
Warning: an existing sandbox was detected. /usr/bin/ssh will run without any additional sandboxing features

Originally created by @ghost on GitHub (Feb 2, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1086 With the default ssh profile enabled, the following command fails: ```bash ssh -J host1 host2 ``` the error messages are ``` Redirecting symlink to /usr/bin/ssh Warning: cannot switch euid to root Warning: cannot switch egid to root Warning: cannot switch euid to root Warning: cannot switch egid to root Warning: an existing sandbox was detected. /usr/bin/ssh will run without any additional sandboxing features ```

gitea-mirror

2026-05-05 06:33:24 -06:00

closed this issue
added the
bug
label

gitea-mirror commented

2026-05-05 06:33:30 -06:00

Author

Owner

@ghost commented on GitHub (Feb 10, 2017):

I should mention that this behavior only occurs after creating symlinks with firecfg.

I just realized if I type
firecfg --profile=/etc/firejail/ssh.profile

and then

ssh -J host1 host2

everything works just fine.

Operating system is Debian Testing (firejail version 0.9.44.8).

@ghost commented on GitHub (Feb 10, 2017): I should mention that this behavior only occurs after creating symlinks with firecfg. I just realized if I type `` firecfg --profile=/etc/firejail/ssh.profile `` and then `` ssh -J host1 host2 `` everything works just fine. Operating system is Debian Testing (firejail version 0.9.44.8).

gitea-mirror commented

2026-05-05 06:33:33 -06:00

Author

Owner

@netblue30 commented on GitHub (Feb 11, 2017):

Cool! I'll close it for now.

@netblue30 commented on GitHub (Feb 11, 2017): Cool! I'll close it for now.

gitea-mirror commented

2026-05-05 06:33:35 -06:00

Author

Owner

@altaurog commented on GitHub (Feb 8, 2018):

That doesn’t work for me:

$ firecfg --profile=/etc/firejail/ssh.profile
Error: invalid command line option
firecfg - version 0.9.44.8
...

@altaurog commented on GitHub (Feb 8, 2018): That doesn’t work for me: ``` $ firecfg --profile=/etc/firejail/ssh.profile Error: invalid command line option firecfg - version 0.9.44.8 ... ```

gitea-mirror commented

2026-05-05 06:33:37 -06:00

Author

Owner

@Fred-Barclay commented on GitHub (Feb 9, 2018):

@altaurog I believe it's a typo. 😄 Probably what was meant was
firejail--profile=/etc/firejail/ssh.profile

@Fred-Barclay commented on GitHub (Feb 9, 2018): @altaurog I believe it's a typo. 😄 Probably what was meant was `firejail--profile=/etc/firejail/ssh.profile`

gitea-mirror referenced this issue

2026-05-05 10:07:02 -06:00

[PR #742] [MERGED] Tighten security #3740

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#742

No description provided.

Rows
Columns