[GH-ISSUE #143] Don't leak user/group information #98

New issue

Closed

opened 2026-05-05 05:01:55 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 05:01:55 -06:00

Owner

Originally created by @ghost on GitHub (Nov 16, 2015).
Original GitHub issue: https://github.com/netblue30/firejail/issues/143

In the case that one uses --private-etc and doesn't include /etc/group, some permissions will be missing for some actions. But one may want to

not leak info on users and their groups and permissions (also privacy; users have real names)
have a more restricted environment in the sandbox, no unnecessary permissions

I see that you could use --bind, but that only works with root permissions.
Could the temporary groups be done without root permissions?

Originally created by @ghost on GitHub (Nov 16, 2015). Original GitHub issue: https://github.com/netblue30/firejail/issues/143 In the case that one uses --private-etc and doesn't include /etc/group, some permissions will be missing for some actions. But one may want to 1. not leak info on users and their groups and permissions (also privacy; users have real names) 2. have a more restricted environment in the sandbox, no unnecessary permissions I see that you could use --bind, but that only works with root permissions. Could the temporary groups be done without root permissions?

gitea-mirror

2026-05-05 05:01:55 -06:00

closed this issue
added the
enhancement
label

gitea-mirror commented

2026-05-05 05:02:03 -06:00

Author

Owner

@netblue30 commented on GitHub (Nov 16, 2015):

Let me think about it, probably we can do it without root permission.

@netblue30 commented on GitHub (Nov 16, 2015): Let me think about it, probably we can do it without root permission.

gitea-mirror commented

2026-05-05 05:02:05 -06:00

Author

Owner

@netblue30 commented on GitHub (Nov 19, 2015):

Fixed! The sandbox is coming by default with a /home directory with only the current user, and clean /etc/passwd and /etc/group files.

@netblue30 commented on GitHub (Nov 19, 2015): Fixed! The sandbox is coming by default with a /home directory with only the current user, and clean /etc/passwd and /etc/group files.

gitea-mirror referenced this issue

2026-05-05 09:26:39 -06:00

[GH-ISSUE #4815] firejail --list truncates command output in pipes and command substitutions #2785

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#98

No description provided.

Rows
Columns