Jail firefox.

[TheJanitor]

So i have been using Linux for a couple of years now and i still don't like the idea of my browser running naked on the interwebz, so i was going to build a jail for firefox.

The problem is, i will be running two different installations and i wish to share my firefox profile between them through symbolic links. With that, i will need to put a symbolic link inside at least one of the jails to point to my profile.

What are the dangers concerning this? Will this breach the jails security?

the process and libraries will still be running inside, so should this be an issue? it's really to provide a layer against potentially scripted attacks; and not a direct attack.


Thanks.

[Lazydog]

I would just rsync them.

[TheJanitor]

Thanks for the suggestion, i will consider it, but the problem i have with this solution is that is could lead to data loss or corruption.

but on further reading it seems that i will have no option:

Symbolic links from inside the jail to the outside will work for the administrator but will not work for the system running inside the jail.

symbolic links don't escape jail, hard links do

source

can anyone confirm this?


Thanks for your time.

[TheJanitor]

bump. Thanks.

[Lazydog]

Give it a try. I normally don't what anything in my jail to get out so I have never tried this.