mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #1241] Despite firejail workin on firefox I can acces all files on my hard disk from the browser #845
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#845
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @escapeplan4 on GitHub (Apr 21, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1241
All of the sudden my firejail stopped working as a sandbox for firefox and I can download files from firefox and save it all over the hard drive not only on Download directory on linux mint. I open firefox with default firejail firefox %u
@reinerh commented on GitHub (Apr 21, 2017):
Was there perhaps an (unjailed) firefox already running? Can you please check your process list before you start firefox in firejail?
@netblue30 commented on GitHub (Apr 22, 2017):
Also see this: https://firejail.wordpress.com/support/frequently-asked-questions/#firefox
@Hund commented on GitHub (May 15, 2017):
I have the same issue with Pale Moon (old fork of Firefox). I've double checked that there's no processes in the background.
@Hund commented on GitHub (May 23, 2017):
I just noticed that it is only my remote storage (mounted via sshfs) that I'm able to access, not my local filesystem.
@netblue30 commented on GitHub (May 26, 2017):
@Hund - Where do you keep your remote storage mounted? Is it in your home directory? Maybe our whitelist/blacklist leaves sshfs filesystems in?
@Hund commented on GitHub (May 26, 2017):
In
/media.@netblue30 commented on GitHub (Jun 6, 2017):
@Hund - blacklist /media: run "firejail --blacklist=/media program-name". You can also add it in a profile file.
@Hund commented on GitHub (Jun 16, 2017):
Sorry, I was wrong. Pale Moon can access everything in
/.@netblue30 commented on GitHub (Jun 18, 2017):
Yes it can. This is where the filesystem is, including Pale Moon executables. Anyway, most directories are mounted read-only.