3 ms·
flatpak or firejail would have protected you from this vulnerability, not sure what they're on about here. They are 100% proof against everything of course.
by EasyMark 2y ago
flatpak or firejail would have protected you from this vulnerability, not sure what they're on about here. They are 100% proof against everything of course.
- nullc 2y agoThe firefox flatpak has write access to your home directory. So it can simply edit your bashrc even if there are no more direct escapes, no?
- mikedelfino 2y agoFirefox Flatpak has neither write or read permission to your home directory. At least that's my take from browsing file:///home/myuser. If you try to open or save a file using the native dialogs, you do grant the appropriate permission on demand, but that's using the xdg portal, outside the app scope, specifically designed for this.