Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.bugs.dist > #1129894
| From | Vincent Lefevre <vincent@vinc17.net> |
|---|---|
| Newsgroups | linux.debian.bugs.dist |
| Subject | Bug#1025386: firejail: cannot use gdb with --allow-debuggers --profile=firefox |
| Date | 2022-12-22 19:30 +0100 |
| Message-ID | <FFyul-csoo-5@gated-at.bofh.it> (permalink) |
| References | <FyG3D-88l7-9@gated-at.bofh.it> <FBciJ-9KpE-1@gated-at.bofh.it> <FyG3D-88l7-9@gated-at.bofh.it> <FBciJ-9KpE-1@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Hi Reiner, On 2022-12-10 18:48:39 +0100, Reiner Herrmann wrote: > Debugging tools that have dependencies (like in your example gdb -> python3) > need to be handled additionally (either by asking gdb to not use the > python3 extensions, or by adding parameters that whitelist it). > > With the following command line I was able to get a gdb shell: > > $ firejail --allow-debuggers --include=/etc/firejail/allow-python3.inc --profile=firefox gdb > > [...] > > (gdb) However, this is not a good solution from a security point of view. There's a difference between allowing Python completely and just embedding in some given application. This could also be an issue in gdb. There should be a way to disable Python, or have Python automatically disabled when not available. -- Vincent Lefèvre <vincent@vinc17.net> - Web: <https://www.vinc17.net/> 100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/> Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)
Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Bug#1025386: firejail: cannot use gdb with --allow-debuggers --profile=firefox Vincent Lefevre <vincent@vinc17.net> - 2022-12-03 20:10 +0100
Bug#1025386: firejail: cannot use gdb with --allow-debuggers --profile=firefox Reiner Herrmann <reiner@reiner-h.de> - 2022-12-10 19:00 +0100
Bug#1025386: firejail: cannot use gdb with --allow-debuggers --profile=firefox Vincent Lefevre <vincent@vinc17.net> - 2022-12-22 19:30 +0100
Bug#1025386: firejail: cannot use gdb with --allow-debuggers --profile=firefox Reiner Herrmann <reiner@reiner-h.de> - 2022-12-22 19:40 +0100
Bug#1025386: firejail: cannot use gdb with --allow-debuggers --profile=firefox Vincent Lefevre <vincent@vinc17.net> - 2022-12-22 20:50 +0100
Bug#1025386: firejail: cannot use gdb with --allow-debuggers --profile=firefox Reiner Herrmann <reiner@reiner-h.de> - 2022-12-22 21:00 +0100
csiph-web