firejail
Security sandbox for any type of processes
Firejail is a SUID program that reduces the risk of security breaches by restricting the running environment of untrusted applications using Linux namespaces and seccomp-bpf. It allows a process and all its descendants to have their own private view of the globally shared kernel resources, such as the network stack, process table, mount table.
homepage ↗ cpe: cpe:/a:firejail_project:firejail github: netblue30/firejail
Available in
| Overlay | Newest | Ebuilds | Last activity | |
|---|---|---|---|---|
| gentoo gitweb ↗ | 0.9.80 | 2 | 13 h | details › |
| inode64-overlay GitHub ↗ | 0.9.70 | 1 | 16 h | details › |
| hossie GitHub ↗ | 0.9.72_p20241108 | 1 | 3 d | details › |
Versions & arches
| Version | Overlay | amd64 | arm64 | x86 | arm | Committed | |
|---|---|---|---|---|---|---|---|
| 0.9.80 | gentoo | amd64 testing | arm64 testing | x86 testing | arm testing | — | view · download · history ↗ |
| 0.9.76 | gentoo | amd64 stable | arm64 stable | x86 testing | arm testing | — | view · download · history ↗ |
| 0.9.72_p20241108 ≈ | hossie | amd64 stable | arm64 testing | x86 testing | arm testing | 20 mo | view · download · history ↗ |
| 0.9.70 ≈ | inode64-overlay | amd64 untested | arm64 untested | x86 untested | arm untested | 6 mo | view · download · history ↗ |
Use flags of 0.9.80
- apparmor Enable support for custom AppArmor profiles
- +chroot Enable chrooting to custom directory
- contrib Install contrib scripts
- +dbusproxy Enable DBus proxying to filter access in supporting profiles
- +file-transfer Enable file transfers between sandboxes and the host system
- +network Enable networking features
- +private-home Enable private home feature
- selinux !!internal use only!! Security Enhanced Linux support, this must be set by the selinux profile or breakage will occur
- test Enable dependencies and/or preparations necessary to run tests (usually controlled by FEATURES=test but can be toggled independently)
- +userns Enable attaching a new user namespace to a sandbox (--noroot option)
- X Enable X11 sandboxing
3 expansion flags (python targets, ABIs, cpu flags…)
- python_single_target_python3_12
- python_single_target_python3_13
- python_single_target_python3_14
Runtime dependencies of 0.9.80
show 21 lines
apparmor?
(
)
contrib?
(
python_single_target_python3_12?
(
)
python_single_target_python3_13?
(
)
python_single_target_python3_14?
(
)
)
dbusproxy?
(
)
selinux?
(
)