bug#42996: icecat can escape from `guix environment --container`

2020-08-24 Thread Julien Lepiller
Then, closing. Thank you :) Le 23 août 2020 21:15:55 GMT-04:00, luhux a écrit : >On Sun, Aug 23, 2020 at 11:38:47AM -0400, Julien Lepiller wrote: >> One possibility is that you're seeing the virtual root filesystem, >that thwuld only have a few direccories and the structure up to the >directory y

bug#42996: icecat can escape from `guix environment --container`

2020-08-23 Thread Leo Famulari
I believe that this is expected given the specification of `guix environment`, which is its chapter in the manual. [0] It says, "For containers, the default behavior is to share the current working directory with the isolated container and immediately change to that directory within the container.

bug#42996: icecat can escape from `guix environment --container`

2020-08-23 Thread Leo Famulari
On Sun, Aug 23, 2020 at 06:18:49PM +0800, luhux wrote: > I am using guix environment --container to isolate some programs that > are prone to leak information. guix environment --container works well > in freerdp and other programs until I use guix environment --container > to containerize icecat,

bug#42996: icecat can escape from `guix environment --container`

2020-08-23 Thread Julien Lepiller
One possibility is that you're seeing the virtual root filesystem, that thwuld only have a few direccories and the structure up to the directory you created your container in. Are you sure you can access files outside of the directory you started icecat in? Another possiblity is that you had a

bug#42996: icecat can escape from `guix environment --container`

2020-08-23 Thread luhux
I am using guix environment --container to isolate some programs that are prone to leak information. guix environment --container works well in freerdp and other programs until I use guix environment --container to containerize icecat, Steps to reproduce: guix environmnt --container (...some op