Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

dont use filesystem=home #56

Open
alexmo1997 opened this issue Jul 29, 2023 · 2 comments
Open

dont use filesystem=home #56

alexmo1997 opened this issue Jul 29, 2023 · 2 comments

Comments

@alexmo1997
Copy link

Using filesystem=home is not really a good practice as it allows access to the whole user home directory which is not needed here.

@hadess
Copy link
Collaborator

hadess commented Jul 29, 2023

And how do you expect Ghidra to be able to access files when the toolkit it uses doesn't support portals? More than that, Ghidra expects access to a file, and its neighbours, so the current file portals would not be enough.

@dogtopus
Copy link

dogtopus commented Apr 9, 2024

As @hadess said, nothing really we can do here without breaking it for majority of people.

As an alternative, you can always confine Ghidra yourself by revoking its home access and grant it access to home/.ghidra:create, your project directory and binary directory. This is also what I'm currently doing.

EDIT: 11.x now follows XDG directory specification, so home/.ghidra:create is no longer needed. You only need to whitelist the project and binary directories for the confinement to work.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants