Hacker News new | ask | show | jobs
by x5n1 3962 days ago
does firejail protect your filesystem from the application? can the recent firefox exploit steal your ssh keys if firefox was run under firejail?
2 comments

By default, firejail seems to allow read access to my entire home directory. I believe you have to use the --private flag for it protect you from the recent firefox exploit. And if you want persistence, you can use the --private=directory flag.