{"action":"created","issue":{"url":"https://api.github.com/repos/netblue30/firejail/issues/770","repository_url":"https://api.github.com/repos/netblue30/firejail","labels_url":"https://api.github.com/repos/netblue30/firejail/issues/770/labels{/name}","comments_url":"https://api.github.com/repos/netblue30/firejail/issues/770/comments","events_url":"https://api.github.com/repos/netblue30/firejail/issues/770/events","html_url":"https://github.com/netblue30/firejail/issues/770","id":175323473,"number":770,"title":"[enhancement] Redesign of private-tmp","user":{"login":"chiraag-nataraj","id":14947779,"avatar_url":"https://avatars.githubusercontent.com/u/14947779?v=3","gravatar_id":"","url":"https://api.github.com/users/chiraag-nataraj","html_url":"https://github.com/chiraag-nataraj","followers_url":"https://api.github.com/users/chiraag-nataraj/followers","following_url":"https://api.github.com/users/chiraag-nataraj/following{/other_user}","gists_url":"https://api.github.com/users/chiraag-nataraj/gists{/gist_id}","starred_url":"https://api.github.com/users/chiraag-nataraj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/chiraag-nataraj/subscriptions","organizations_url":"https://api.github.com/users/chiraag-nataraj/orgs","repos_url":"https://api.github.com/users/chiraag-nataraj/repos","events_url":"https://api.github.com/users/chiraag-nataraj/events{/privacy}","received_events_url":"https://api.github.com/users/chiraag-nataraj/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/netblue30/firejail/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-09-06T18:56:47Z","updated_at":"2016-09-06T19:37:26Z","closed_at":null,"body":"I'm wondering if the following is feasible.\r\n\r\n- Recommend (in the docs, etc) that users disable the abstract X11 socket by adding `-nolisten local` to the X initialization script (xserverrc, .desktop file of your favorite login manager). This takes care of the messy situation with X11 abstract sockets and reduces the problem to locking down the ordinary unix socket in `/tmp/.X11-unix`.\r\n- Rewrite `--private-tmp` to whitelist `/tmp/.X11-unix` unless X11 isolation is being used so that X will continue to work even if you use `--net=none` and `--private-tmp`.\r\n\r\nThoughts?"},"comment":{"url":"https://api.github.com/repos/netblue30/firejail/issues/comments/245064870","html_url":"https://github.com/netblue30/firejail/issues/770#issuecomment-245064870","issue_url":"https://api.github.com/repos/netblue30/firejail/issues/770","id":245064870,"user":{"login":"netblue30","id":13711990,"avatar_url":"https://avatars.githubusercontent.com/u/13711990?v=3","gravatar_id":"","url":"https://api.github.com/users/netblue30","html_url":"https://github.com/netblue30","followers_url":"https://api.github.com/users/netblue30/followers","following_url":"https://api.github.com/users/netblue30/following{/other_user}","gists_url":"https://api.github.com/users/netblue30/gists{/gist_id}","starred_url":"https://api.github.com/users/netblue30/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/netblue30/subscriptions","organizations_url":"https://api.github.com/users/netblue30/orgs","repos_url":"https://api.github.com/users/netblue30/repos","events_url":"https://api.github.com/users/netblue30/events{/privacy}","received_events_url":"https://api.github.com/users/netblue30/received_events","type":"User","site_admin":false},"created_at":"2016-09-06T19:37:26Z","updated_at":"2016-09-06T19:37:26Z","body":"It is a good idea, I'll put it in, thanks."}}
{"actor":{"display_login":"netblue30"}}