Questions tagged [firejail]
The firejail tag has no usage guidance.
0
votes
0answers
42 views
Difference between SUID and user namespace
I was reading up on rootless containers which have the possibility to have unprivileged non-root containers where the parent process or tool that starts the application container itself runs as "non-...
1
vote
1answer
57 views
Firejailed Thunderbird, opening attachments
I am running both Firefox and Thunderbird in firejail, on Linux Mint 19.1.
By coincidence, two people recently sent me emails with attached PDFs, but they were handled differently. The emails came ...
0
votes
2answers
95 views
Does firejail rely on the application crashing out and why can't we use named pipes to .Xauthority?
The purpose of jailing an Xorg application is to prevent it from accessing @/tmp/X11/X0 and /tmp/X11/X0 and then re-using its MIT-MAGIC-COOKIE to steal from other apps that are connected to the X ...
3
votes
1answer
283 views
firejail : only let a program access localhost
I have this local network service and this client program needing to access it. I am running them both as an unprivileged user.
I am looking for a way to sandbox the client using firejail, in a way ...
1
vote
0answers
70 views
firejail: child-process not sandboxed?
As far as the sandbox "firejail" is concerned I´ve encountered a phenomenon which isn´t completely clear to me.
My understanding has always been that whenever I start a programm/process in firejail ...
1
vote
1answer
183 views
How to avoid running make as root in the last step of installing an application from source? [duplicate]
I am always reluctant to run make install as root as the last step of installing an application from source. After all, it allows executing arbitrary code form the Makefile. It has already happened to ...
1
vote
0answers
113 views
Access host's systemd from firejail --overlay namespace
Instead of initializing a whole discrete system, I want to run isolated programs and services within the same host. I can already achieve that with firejail --noprofile --overlay, but the problem is ...
1
vote
1answer
299 views
firejail memory limit
I want to create a firejail profile that limits memory for applications.
I'm trying to figure out if it's possible to limit memory using firejail.
But It seems that some versions had the --rlimit-as ...
0
votes
1answer
319 views
firejail for complete security (for scripts downloaded from Inet)
I need to run scripts downloaded from the untrusted network.
I want to run such scripts in Firejail.
But firejail --caps.drop=all ls /home/porton/ shows that it has access to my home directory! It ...
1
vote
0answers
88 views
How to install firetools in whonix?
My goal to launch browser safety, for this task I need use firejail (exists in backports repository) and firetools (not exists in main and in backports).
Are there any ways install firetools on ...
0
votes
1answer
240 views
firejail opera browser with --private-option
I´ve created a portable version of the opera-browser (see https://gist.github.com/ruario/8416e36372f1a976a713 ).
In order to open it I've got to type the command opera-developer_27.0.1670.0_amd64/...
0
votes
1answer
551 views
Debian - cannot delete /etc/group- — “Device or resource busy”
I can't remove /etc/group- -- why not?
root@dom:/etc# whoami
root
root@dom:/etc# pwd
/etc
root@dom:/etc# rm -f /etc/group-
rm: cannot remove ‘/etc/group-’: Device or resource busy
root@dom:/etc# ...
5
votes
2answers
945 views
How can I run local applications through firejail?
I've installed debian package locally. I randomly chose Opera, extracted via dkpg -x opera-x.y.z.deb ~/bin/opera_package, and created a symlink in my user's ~/bin folder (which is in the user's path). ...
1
vote
1answer
680 views
Firejail or chroot [closed]
What's the difference between Firejail and chroot in case of security? I mean, should I trust a built-in tool or third-party for sandboxing untrusted applications that could be potentially targeted to ...
0
votes
1answer
929 views
Firejail and connecting to the Internet through an host OpenVPN client
If the host is an OpenVPN client, how would I set up Internet access for a
firejail sandbox with its own network namespace?
0
votes
1answer
574 views
How to run firejail as root?
How can I run firejail as a root user?
# firejail --seccomp firefox
Reading profile /etc/firejail/firefox.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/...
3
votes
1answer
273 views
How to use screen when /dev/tty is disabled?
Firejail provides secure environment that strips /dev files with little number of exception. So when I try to run screen inside the environment, I get "Must be connected to a terminal". tty responds ...
