News for hackers. Stuff that matters.

A comment on Firejail – Sandbox Linux Applications. Parent comment

Re:Firejail – Sandbox Linux Applications by tetraodonpuffer on Tuesday November 10, 2020 @07:25PM (#25054043)
Sure you could see them, after all you can do a ps and see all processes, but shouldn’t the IPC between firejails be forbidden? How is firejail 2 talking to firejail 1?
[ Parent | on HN ]
Re:Firejail – Sandbox Linux Applications by jlgaddis on Tuesday November 10, 2020 @09:15PM (#25054834)
> ... after all you can do a ps and see all processes ...

Which you can prevent by mounting /proc with the "hidepid" option.

[ Parent | on HN ]
Re:Firejail – Sandbox Linux Applications by pdonis on Tuesday November 10, 2020 @10:29PM (#25055201)
> shouldn’t the IPC between firejails be forbidden?

I think it depends on what kind of IPC. I'm not familiar enough with the details of how Firefox does it to know how that would interact with firejails.

[ Parent | on HN ]