[GH-ISSUE #1429] private-bin needs to understand filenames by absolute paths (even with restriction to {/usr{/local,},}/{s,}bin) #968

Closed
opened 2026-05-05 07:14:08 -06:00 by gitea-mirror · 3 comments
Owner

Originally created by @msva on GitHub (Aug 3, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1429

Subj.
Otherwise, it will always be problems like that:

$ # In the jail
$ env -i
zsh: too many levels of symbolic links: env
$ ls -l /bin/env
lrwxrwxrwx 1 65534 65534 8 авг  4 05:01 /bin/env -> /bin/env
$ # Outside the jail
$ ls -l /usr/bin/env /bin/mail
lrwxrwxrwx 1 root root 8 мар 10 04:10 /usr/bin/env -> /bin/env*
lrwxrwxrwx 1 root root   13 апр 11 02:32 /bin/mail -> /usr/bin/mail*
# ^ There can be a cross-symlinks from /bin to /usr/bin and vice versa
# So, it is no way to properly resolve it with paths prioritization only.
Originally created by @msva on GitHub (Aug 3, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1429 Subj. Otherwise, it will always be problems like that: ```ShellSession $ # In the jail $ env -i zsh: too many levels of symbolic links: env $ ls -l /bin/env lrwxrwxrwx 1 65534 65534 8 авг 4 05:01 /bin/env -> /bin/env ``` ```ShellSession $ # Outside the jail $ ls -l /usr/bin/env /bin/mail lrwxrwxrwx 1 root root 8 мар 10 04:10 /usr/bin/env -> /bin/env* lrwxrwxrwx 1 root root 13 апр 11 02:32 /bin/mail -> /usr/bin/mail* # ^ There can be a cross-symlinks from /bin to /usr/bin and vice versa # So, it is no way to properly resolve it with paths prioritization only. ```
gitea-mirror 2026-05-05 07:14:08 -06:00
Author
Owner

@netblue30 commented on GitHub (Aug 5, 2017):

I'll try to squeeze something in the next release, and we have to do the same for all other --private options.

<!-- gh-comment-id:320442557 --> @netblue30 commented on GitHub (Aug 5, 2017): I'll try to squeeze something in the next release, and we have to do the same for all other --private options.
Author
Owner

@chiraag-nataraj commented on GitHub (Aug 20, 2018):

@msva Do you still have this issue?

<!-- gh-comment-id:414360626 --> @chiraag-nataraj commented on GitHub (Aug 20, 2018): @msva Do you still have this issue?
Author
Owner

@msva commented on GitHub (Nov 18, 2018):

@chiraag-nataraj looks like it works fine for now

<!-- gh-comment-id:439723329 --> @msva commented on GitHub (Nov 18, 2018): @chiraag-nataraj looks like it works fine for now
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#968
No description provided.