{"action":"created","issue":{"url":"https://api.github.com/repos/netblue30/firejail/issues/329","repository_url":"https://api.github.com/repos/netblue30/firejail","labels_url":"https://api.github.com/repos/netblue30/firejail/issues/329/labels{/name}","comments_url":"https://api.github.com/repos/netblue30/firejail/issues/329/comments","events_url":"https://api.github.com/repos/netblue30/firejail/issues/329/events","html_url":"https://github.com/netblue30/firejail/issues/329","id":136909116,"number":329,"title":"security breach?","user":{"login":"nntb2a","id":10103295,"avatar_url":"https://avatars.githubusercontent.com/u/10103295?v=3","gravatar_id":"","url":"https://api.github.com/users/nntb2a","html_url":"https://github.com/nntb2a","followers_url":"https://api.github.com/users/nntb2a/followers","following_url":"https://api.github.com/users/nntb2a/following{/other_user}","gists_url":"https://api.github.com/users/nntb2a/gists{/gist_id}","starred_url":"https://api.github.com/users/nntb2a/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nntb2a/subscriptions","organizations_url":"https://api.github.com/users/nntb2a/orgs","repos_url":"https://api.github.com/users/nntb2a/repos","events_url":"https://api.github.com/users/nntb2a/events{/privacy}","received_events_url":"https://api.github.com/users/nntb2a/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/netblue30/firejail/labels/bug","name":"bug","color":"fc2929"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":6,"created_at":"2016-02-27T11:34:04Z","updated_at":"2016-04-01T11:50:50Z","closed_at":null,"body":"Hello\r\ni have firejail version 0.9.38 and Dillo version 3.1-dev in gentoo system, both compiled by clang-3.5.0-r100\r\n\r\nwith all default configuration i have private-etc ignored by last version of dillo, file:///etc shows me full directory list. firejail ls /etc or firejail links file:///etc works ok, though. blacklists are working fine.\r\n\r\ncat /etc/firejail/generic.profile \r\n################################\r\n# Generic GUI application profile\r\n################################\r\ninclude /etc/firejail/disable-mgmt.inc\r\ninclude /etc/firejail/disable-secret.inc\r\ninclude /etc/firejail/disable-common.inc\r\nblacklist ${HOME}/.pki/nssdb\r\nblacklist ${HOME}/.lastpass\r\nblacklist ${HOME}/.keepassx\r\nblacklist ${HOME}/.password-store\r\ncaps.drop all\r\nseccomp\r\nprotocol unix,inet,inet6\r\nnetfilter\r\nnoroot\r\nshell none\r\nnogroups\r\nprivate-etc resolv.conf,ca-certificates,ld.so.cache,ls.so.conf,mime.types\r\n\r\ninclude /etc/firejail/disable-devel.inc\r\n\r\n\r\nI can print included configurations, if needed (they are totally default)\r\n\r\n\r\nI am curious, how that possibly happen?\r\nThanks"},"comment":{"url":"https://api.github.com/repos/netblue30/firejail/issues/comments/204364423","html_url":"https://github.com/netblue30/firejail/issues/329#issuecomment-204364423","issue_url":"https://api.github.com/repos/netblue30/firejail/issues/329","id":204364423,"user":{"login":"netblue30","id":13711990,"avatar_url":"https://avatars.githubusercontent.com/u/13711990?v=3","gravatar_id":"","url":"https://api.github.com/users/netblue30","html_url":"https://github.com/netblue30","followers_url":"https://api.github.com/users/netblue30/followers","following_url":"https://api.github.com/users/netblue30/following{/other_user}","gists_url":"https://api.github.com/users/netblue30/gists{/gist_id}","starred_url":"https://api.github.com/users/netblue30/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/netblue30/subscriptions","organizations_url":"https://api.github.com/users/netblue30/orgs","repos_url":"https://api.github.com/users/netblue30/repos","events_url":"https://api.github.com/users/netblue30/events{/privacy}","received_events_url":"https://api.github.com/users/netblue30/received_events","type":"User","site_admin":false},"created_at":"2016-04-01T11:50:50Z","updated_at":"2016-04-01T11:50:50Z","body":"I'll try to take a look shortly."}}