summaryrefslogtreecommitdiffstats
path: root/todo
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2015-12-12 08:14:44 -0500
committerLibravatar netblue30 <netblue30@yahoo.com>2015-12-12 08:14:44 -0500
commit1d7f4c65e4335ef8000967f08af8c549227bc325 (patch)
treea2a620884bf2e1a86a6ff29725f93312eb65f533 /todo
parentdebug enhancements (diff)
downloadfirejail-1d7f4c65e4335ef8000967f08af8c549227bc325.tar.gz
firejail-1d7f4c65e4335ef8000967f08af8c549227bc325.tar.zst
firejail-1d7f4c65e4335ef8000967f08af8c549227bc325.zip
fixes
Diffstat (limited to 'todo')
-rw-r--r--todo46
1 files changed, 1 insertions, 45 deletions
diff --git a/todo b/todo
index dc2a7ee0e..e63005e1d 100644
--- a/todo
+++ b/todo
@@ -77,7 +77,6 @@ socat ABSTRACT-LISTEN:/tmp/dbus-awBoQTCc,fork UNIX-CONNECT:/tmp/mysock
77 77
7813. While using --net=eth0 assign the name of the interface inside the sandbox as eth0 7813. While using --net=eth0 assign the name of the interface inside the sandbox as eth0
79 79
8014. check chroot does not allow on symlinks
8115. do not attempt to mount /sys if unmount fails 8015. do not attempt to mount /sys if unmount fails
82 81
83$ firejail --noprofile --chroot=/tmp/chroot 82$ firejail --noprofile --chroot=/tmp/chroot
@@ -98,53 +97,10 @@ Child process initialized
9816. add support for --ip, --iprange, --mac and --mtu for --interface option 9716. add support for --ip, --iprange, --mac and --mtu for --interface option
99 98
10017. private-home clashing with blacklist 9917. private-home clashing with blacklist
101$ firejail --private-home=.mozilla 100whitelist clashing with blacklist
102Reading profile /etc/firejail/generic.profile
103Reading profile /etc/firejail/disable-mgmt.inc
104Reading profile /etc/firejail/disable-secret.inc
105Reading profile /etc/firejail/disable-common.inc
106
107** Note: you can use --noprofile to disable generic.profile **
108
109Parent pid 8193, child pid 8194
110/run/firejail/mnt/cp: cannot access `/home/netblue/.mozilla': Permission denied
111Error system cp -a --parents:duplicate(381): No such file or directory
112Child process initialized
113$ ls -la
114total 4
115drwx------ 3 test test 100 Nov 25 07:59 .
116drwxr-xr-x 3 65534 65534 60 Nov 25 07:59 ..
117-rw-r--r-- 1 test test 3392 Nov 25 07:59 .bashrc
118dr-x------ 2 65534 65534 40 Nov 24 17:53 .mozilla
119-rw------- 1 test test 0 Nov 25 07:59 .Xauthority
120
121
122
123
12418. whitelist clashing with blacklist
125$ firejail --whitelist=~/.mozilla
126Reading profile /etc/firejail/generic.profile
127Reading profile /etc/firejail/disable-mgmt.inc
128Reading profile /etc/firejail/disable-secret.inc
129Reading profile /etc/firejail/disable-common.inc
130
131** Note: you can use --noprofile to disable generic.profile **
132
133Parent pid 9440, child pid 9441
134Child process initialized
135$ ls -al
136total 8
137drwx------ 3 netblue netblue 100 Nov 25 08:09 .
138drwxr-xr-x 3 65534 65534 60 Nov 25 08:09 ..
139-rw-r--r-- 1 netblue netblue 3392 Nov 25 08:09 .bashrc
140dr-x------ 2 65534 65534 40 Nov 24 17:53 .mozilla
141-rw------- 1 netblue netblue 51 Nov 25 08:09 .Xauthority
142
143 101
14419. Try --overlay on a Ubuntu 14.04 32bit.Without adding --dns, there will be no network connectivity - see issue 151 10219. Try --overlay on a Ubuntu 14.04 32bit.Without adding --dns, there will be no network connectivity - see issue 151
145 103
14620. blacklist ~/.cache in disable-common.inc???
147
14821. restrict chars in filenames 10421. restrict chars in filenames
149 105
150try to open url-encoded filenames 106try to open url-encoded filenames