Tip: quick workaround for Firejail vulnerability

[Pjotr]

Many people use Firejail for sandboxing their web browsers. There's a potentially dangerous vulnerability in Firejail versions below 0.9.64.2:
https://unparalleled.eu/publications/20 ... 2021-0.txt

And:
https://www.openwall.com/lists/oss-secu ... 21/02/08/5

Summary: support for OverlayFS in Firejail is vulnerable. A quick workaround is to simply disable that support, for example by means of this single command:

Code: Select all

sudo sed -i 's/# overlayfs yes/overlayfs no/' /etc/firejail/firejail.config

Done.

[gittiest personITW]

Thank you Pjotr.