[GH-ISSUE #1241] Despite firejail workin on firefox I can acces all files on my hard disk from the browser #845

Closed
opened 2026-05-05 06:58:00 -06:00 by gitea-mirror · 9 comments
Owner

Originally created by @escapeplan4 on GitHub (Apr 21, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1241

All of the sudden my firejail stopped working as a sandbox for firefox and I can download files from firefox and save it all over the hard drive not only on Download directory on linux mint. I open firefox with default firejail firefox %u

Originally created by @escapeplan4 on GitHub (Apr 21, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1241 All of the sudden my firejail stopped working as a sandbox for firefox and I can download files from firefox and save it all over the hard drive not only on Download directory on linux mint. I open firefox with default firejail firefox %u
gitea-mirror 2026-05-05 06:58:00 -06:00
Author
Owner

@reinerh commented on GitHub (Apr 21, 2017):

Was there perhaps an (unjailed) firefox already running? Can you please check your process list before you start firefox in firejail?

<!-- gh-comment-id:296232994 --> @reinerh commented on GitHub (Apr 21, 2017): Was there perhaps an (unjailed) firefox already running? Can you please check your process list before you start firefox in firejail?
Author
Owner

@netblue30 commented on GitHub (Apr 22, 2017):

Also see this: https://firejail.wordpress.com/support/frequently-asked-questions/#firefox

<!-- gh-comment-id:296397107 --> @netblue30 commented on GitHub (Apr 22, 2017): Also see this: https://firejail.wordpress.com/support/frequently-asked-questions/#firefox
Author
Owner

@Hund commented on GitHub (May 15, 2017):

I have the same issue with Pale Moon (old fork of Firefox). I've double checked that there's no processes in the background.

<!-- gh-comment-id:301393933 --> @Hund commented on GitHub (May 15, 2017): I have the same issue with Pale Moon (old fork of Firefox). I've double checked that there's no processes in the background.
Author
Owner

@Hund commented on GitHub (May 23, 2017):

I just noticed that it is only my remote storage (mounted via sshfs) that I'm able to access, not my local filesystem.

<!-- gh-comment-id:303526564 --> @Hund commented on GitHub (May 23, 2017): I just noticed that it is only my remote storage (mounted via sshfs) that I'm able to access, not my local filesystem.
Author
Owner

@netblue30 commented on GitHub (May 26, 2017):

@Hund - Where do you keep your remote storage mounted? Is it in your home directory? Maybe our whitelist/blacklist leaves sshfs filesystems in?

<!-- gh-comment-id:304284407 --> @netblue30 commented on GitHub (May 26, 2017): @Hund - Where do you keep your remote storage mounted? Is it in your home directory? Maybe our whitelist/blacklist leaves sshfs filesystems in?
Author
Owner

@Hund commented on GitHub (May 26, 2017):

In /media.

<!-- gh-comment-id:304303739 --> @Hund commented on GitHub (May 26, 2017): In `/media`.
Author
Owner

@netblue30 commented on GitHub (Jun 6, 2017):

@Hund - blacklist /media: run "firejail --blacklist=/media program-name". You can also add it in a profile file.

<!-- gh-comment-id:306628354 --> @netblue30 commented on GitHub (Jun 6, 2017): @Hund - blacklist /media: run "firejail --blacklist=/media program-name". You can also add it in a profile file.
Author
Owner

@Hund commented on GitHub (Jun 16, 2017):

Sorry, I was wrong. Pale Moon can access everything in /.

<!-- gh-comment-id:309024708 --> @Hund commented on GitHub (Jun 16, 2017): Sorry, I was wrong. Pale Moon can access everything in `/`.
Author
Owner

@netblue30 commented on GitHub (Jun 18, 2017):

Yes it can. This is where the filesystem is, including Pale Moon executables. Anyway, most directories are mounted read-only.

<!-- gh-comment-id:309277465 --> @netblue30 commented on GitHub (Jun 18, 2017): Yes it can. This is where the filesystem is, including Pale Moon executables. Anyway, most directories are mounted read-only.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#845
No description provided.