system
Describe <CVE-2016-10117>.
user
What is <CVE-2016-10117>?
assistant
Firejail does not restrict access to --tmpfs, which allows local users to gain privileges, as demonstrated by mounting over /etc..