Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Request for info on using Firejail with firefox #4623

Open
muziker opened this issue Oct 19, 2021 · 1 comment
Open

Request for info on using Firejail with firefox #4623

muziker opened this issue Oct 19, 2021 · 1 comment
Labels
question_old (Deprecated; use "needinfo" or "question" instead) Further information is requested

Comments

@muziker
Copy link

muziker commented Oct 19, 2021

Description

It's less of a bug, more of wondering why firejail does this with firefox

Steps to Reproduce

  1. start firejail firefox as user
  2. ls /proc/pid of all instances of firefox
  3. cd /proc/pid of a firefox instance as user
  4. ls -l map_files : permission denied

Expected behavior

The directory is listed as user:user as the owner and group owner. An ls should show all mapped files

Actual behavior

It does not allow the user which started firejail firefox to list all the mapped files

Behavior without a profile

Starting firefox manually allows listing of the mapped files

Additional context

When using firejail to start firefox, to check outgoing socket connects, an lsof -i is used to show active connects. However lsof -i does not work when used together with firejail. Looking into /proc shows namespace isolation stops proper output of lsof -i, and related directories like the map_files are not readable by the user.

Environment

Ubuntu 20.04 , firefox 93.0 from repo, firejail 0.9.62 from repo.

@muziker muziker changed the title RFI on using Firejail with firefox Request for info on using Firejail with firefox Oct 19, 2021
@rusty-snake rusty-snake added the question_old (Deprecated; use "needinfo" or "question" instead) Further information is requested label Dec 10, 2021
@rusty-snake
Copy link
Collaborator

ping, there's a discussion in #5035.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question_old (Deprecated; use "needinfo" or "question" instead) Further information is requested
Projects
None yet
Development

No branches or pull requests

2 participants