[GH-ISSUE #139] Blacklisted directories/files disabled (mounted) multiple times instead of once #91

New issue

Closed

opened 2026-05-05 05:01:22 -06:00 by gitea-mirror · 1 comment

gitea-mirror commented

2026-05-05 05:01:22 -06:00

Owner

Originally created by @xmikos on GitHub (Nov 16, 2015).
Original GitHub issue: https://github.com/netblue30/firejail/issues/139

If I look at --debug output of firejail, I can see multiple lines like this:

Disable /usr/bin/xev
Disable /usr/bin/xev
Disable /usr/bin/xev
Disable /usr/bin/xev
Disable /usr/bin/strace
Disable /usr/bin/strace
Disable /usr/bin/strace
Disable /usr/bin/strace

And of course, if I run cat /proc/mounts | grep strace from inside of sandbox, I can see this:

run /usr/bin/strace tmpfs rw,nosuid,nodev,relatime,mode=755 0 0
run /usr/bin/strace tmpfs rw,nosuid,nodev,relatime,mode=755 0 0
run /usr/bin/strace tmpfs rw,nosuid,nodev,relatime,mode=755 0 0
run /usr/bin/strace tmpfs rw,nosuid,nodev,relatime,mode=755 0 0

So it seems disabled files/directories are mounted multiple times instead of once. I am using Arch Linux, so maybe it is somehow related to Arch which has /bin, /sbin and /usr/sbin symlinked to /usr/bin (also /lib, /lib64 and /usr/lib64 is symlinked to /usr/lib).

Originally created by @xmikos on GitHub (Nov 16, 2015). Original GitHub issue: https://github.com/netblue30/firejail/issues/139 If I look at `--debug` output of firejail, I can see multiple lines like this: ``` Disable /usr/bin/xev Disable /usr/bin/xev Disable /usr/bin/xev Disable /usr/bin/xev Disable /usr/bin/strace Disable /usr/bin/strace Disable /usr/bin/strace Disable /usr/bin/strace ``` And of course, if I run `cat /proc/mounts | grep strace` from inside of sandbox, I can see this: ``` run /usr/bin/strace tmpfs rw,nosuid,nodev,relatime,mode=755 0 0 run /usr/bin/strace tmpfs rw,nosuid,nodev,relatime,mode=755 0 0 run /usr/bin/strace tmpfs rw,nosuid,nodev,relatime,mode=755 0 0 run /usr/bin/strace tmpfs rw,nosuid,nodev,relatime,mode=755 0 0 ``` So it seems disabled files/directories are mounted multiple times instead of once. I am using Arch Linux, so maybe it is somehow related to Arch which has `/bin`, `/sbin` and `/usr/sbin` symlinked to `/usr/bin` (also `/lib`, `/lib64` and `/usr/lib64` is symlinked to `/usr/lib`).

gitea-mirror

2026-05-05 05:01:22 -06:00

closed this issue
added the
bug
label

gitea-mirror commented

2026-05-05 05:01:32 -06:00

Author

Owner

@netblue30 commented on GitHub (Nov 17, 2015):

Fixed.

@netblue30 commented on GitHub (Nov 17, 2015): Fixed.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#91

No description provided.

Rows
Columns