[GH-ISSUE #131] Set different rights on folders #86

New issue

Closed

opened 2026-05-05 05:00:43 -06:00 by gitea-mirror · 1 comment

gitea-mirror commented

2026-05-05 05:00:43 -06:00

Owner

Originally created by @nick75e on GitHub (Nov 11, 2015).
Original GitHub issue: https://github.com/netblue30/firejail/issues/131

Hi!
I don't know if you've heard the bad news but our favourite OS is now targeted by ransomware.
Even though it only targets servers for now, that might change in the future.
So to prevent this, would it be possible to create a new option on folders in order to protect files:
in profile files permission <octal> <folder> e.g. permission 300 ~/Downloads. It would allow Firefox to download files but prevent badware/scripts from erasing/encrypting personal files.
If feasible, it'd be very useful for browsers.
Thanks.

Originally created by @nick75e on GitHub (Nov 11, 2015). Original GitHub issue: https://github.com/netblue30/firejail/issues/131 Hi! I don't know if you've heard the bad news but our favourite OS is now targeted by [ransomware](http://arstechnica.com/security/2015/11/new-encryption-ransomware-targets-linux-systems/). Even though it only targets servers for now, that might change in the future. So to prevent this, would it be possible to create a new option on folders in order to protect files: in profile files `permission <octal> <folder>` e.g. `permission 300 ~/Downloads`. It would allow Firefox to download files but prevent badware/scripts from erasing/encrypting personal files. If feasible, it'd be very useful for browsers. Thanks.

gitea-mirror closed this issue

2026-05-05 05:00:46 -06:00

gitea-mirror commented

2026-05-05 05:00:50 -06:00

Author

Owner

@netblue30 commented on GitHub (Nov 11, 2015):

I'm not to worried about ransomware, the only folder visible in home directory is Downloads and the rest of the system is basically read-only. Making Downloads octal 300 will break several extensions (user downloads a file and plays it in vlc or other player).

@netblue30 commented on GitHub (Nov 11, 2015): I'm not to worried about ransomware, the only folder visible in home directory is Downloads and the rest of the system is basically read-only. Making Downloads octal 300 will break several extensions (user downloads a file and plays it in vlc or other player).

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#86

No description provided.

Rows
Columns