Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1193910

Bug#1068122: /usr/bin/firefox: clings to USB stick, Debian 12.5 up-to-date, Xfce

Show all headers | View raw

On Tue, 9 Apr 2024 14:34:36 +0300 Antti-Pekka Känsälä wrote:
> > > I am worried Gmail in a Firefox tab is able to break out of Firefox
> > > somehow, gaining unauthorized access to 128 files on a mounted USB
> stick.
> 
> For my initial bug report, I just quickly did a "wc -l" on a long initial
> printout, so I was mistaken to claim those were distinct files, I don't
> know if they were.  But now I think it is strange that the same file should
> be open so many times, it is wasteful at least and could lead to a cause
> for the clinging.

The file is opened once accordingly to the output you posted. It is how 
lsof reports usage in the case of multithread applications. Perhaps 
other ways to deal with files exist, but I am in doubts concerning real 
benefits for multithread applications related to privacy.

As to access to other files, you may try to figure out if Firefox uses 
file picker provided by desktop-portal. Behavior may be different for 
flatpak/snap and deb packages. I am unsure if XFCE uses some 
desktop-portal implementation. This feature is intended to control what 
files an application may access, however in the case of deb package 
there is no barriers.

> Maybe it has to do with semi-legitimate virus scanning,

You should know better if you have virus scanning software installed. 
 From my point of view, some file indexer should be more probable 
variant (however it should ignore removable devices at least by default).

> I continue to worry about my USB stick security.

You may find processes accessing specific files using autitd.

What actions do you expect from Debian maintainers? (I am not a maintainer.)

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#1068122: /usr/bin/firefox: clings to USB stick, Debian 12.5 up-to-date, Xfce Antti-Pekka Johannes Känsälä <antti.pekka.kansala@iki.fi> - 2024-03-31 12:00 +0200
  Bug#1068122: My thoughts on the possible problem Antti-Pekka Känsälä <antti.pekka.kansala@gmail.com> - 2024-03-31 17:30 +0200
  Bug#1068122: /usr/bin/firefox: clings to USB stick, Debian 12.5 up-to-date, Xfce Max Nikulin <manikulin@gmail.com> - 2024-04-06 09:52 +0200
  Bug#1068122: /usr/bin/firefox: clings to USB stick, Debian 12.5 up-to-date, Xfce Max Nikulin <manikulin@gmail.com> - 2024-04-06 16:40 +0200
  Bug#1068122: /usr/bin/firefox: clings to USB stick, Debian 12.5 up-to-date, Xfce Antti-Pekka Känsälä <antti.pekka.kansala@gmail.com> - 2024-04-09 13:40 +0200
    Bug#1068122: /usr/bin/firefox: clings to USB stick, Debian 12.5 up-to-date, Xfce Max Nikulin <manikulin@gmail.com> - 2024-04-12 18:50 +0200
  Bug#1068122: /usr/bin/firefox: clings to USB stick, Debian 12.5 up-to-date, Xfce Antti-Pekka Känsälä <antti.pekka.kansala@gmail.com> - 2024-04-18 19:40 +0200
    Bug#1068122: /usr/bin/firefox: clings to USB stick, Debian 12.5 up-to-date, Xfce Max Nikulin <manikulin@gmail.com> - 2024-05-06 18:40 +0200

csiph-web