Firejail doesn't hide set secrets

mustaqimM commented 4 years ago

Describe the bug The application (aria2) sets the secret which normally shows as stars, but when run with firejail, it gets exposed:

Behavior change on disabling firejail N/A

To Reproduce Steps to reproduce the behavior:

Expected behavior If possible, firejail should also obfuscate the secret set by the application

Desktop (please complete the following information):

Linux distribution and version (ie output of lsb_release -a)

$❯ lsb_release -a
  LSB Version:    1.0
  Distributor ID: VoidLinux
  Description:    Void Linux
  Release:        rolling
  Codename:       void

Firejail version (output of firejail --version) exclusive or used git commit (git rev-parse HEAD)
```
$❯  firejail --version
firejail version 0.9.62
```

Compile time support:

matu3ba commented 4 years ago

Does aria2 interact with other programs for this feature and (if you know) in what ways?
What is the output of firejail --debug?

rusty-snake commented 4 years ago

What is the output of firejail --debug?

Why? Its completely unrelated.

Does aria2 interact with other programs for this feature and (if you know) in what ways?

I thing they do some hacks in /proc/self.

rusty-snake commented 4 years ago

IDK if we ever want to implement this, because we would need to parse childs args.

labelling as "enhancement" for now.

netblue30 / firejail