[Bug 1195880] New: VUL-0: firejail: private-cwd leaks access to the entire filesystem