Firejail
| Firejail | |
|---|---|
| Written in | C |
| License | GPL-2.0 license |
| Website | firejail |
| Repository | |
Firejail is a security sandbox tool designed to enhance the security of applications by isolating them in a sandbox environment. It is a free and open-source software available for Linux-based operating systems. Firejail was created by Antti Kantee and is maintained by a community of developers.[1][2][3][4][5][6][7]
Features
[edit]- Sandboxing: Firejail allows users to run applications in isolated environments, preventing them from accessing sensitive files and system resources.
- SELinux Integration: It integrates with SELinux (Security-Enhanced Linux) to provide robust security policies.
- Resource Limitation: Firejail can limit the resources (CPU, memory, etc.) that a sandboxed application can use.
- Network Isolation: It can restrict network access for sandboxed applications, enhancing security against network-based attacks.
- Filesystem Access Control: Firejail provides fine-grained control over which files and directories an application can access.
Usage
[edit]Firejail is typically used to run potentially untrusted applications or scripts in a controlled environment. It can be invoked directly from the command line or configured to run specific applications automatically.[8][9]
References
[edit]- ↑ "Firejail - ArchWiki". wiki.archlinux.org. Retrieved 2024-11-08.
- ↑ "Firejail — Gentoo Wiki". wiki.gentoo.org. Retrieved 2024-11-08.
- ↑ "Secure Your Applications with Firejail: A Linux Sandbox Tutorial". DEV Community. 2023-05-28. Retrieved 2024-11-08.
- ↑ Schürmann, Tim. "The Jailer". Linux Magazine. Retrieved 2026-06-05.
- ↑ Siebel, Nils T. (2023). On the Use of Process Containers for Running Vulnerable Programs more Securely. Gesellschaft für Informatik e.V. ISBN 978-3-88579-731-9.
- ↑ Laurén, Samuel; Rauti, Sampsa; Leppänen, Ville (2017-06-23). "A Survey on Application Sandboxing Techniques". Proceedings of the 18th International Conference on Computer Systems and Technologies. CompSysTech '17. New York, NY, USA: Association for Computing Machinery: 141–148. doi:10.1145/3134302.3134312. ISBN 978-1-4503-5234-5.
- ↑ Autefage, Vincent (May 2022). "Firejail : Le couteau suisse du confinement sous Linux". JRES 2022: 14èmes Journées Réseaux. 14. Marseille, France: Renater: Article 31.
- ↑ "FireJail — краткое и ознакомительное практическое руководство". www.linux.org.ru (in Russian). 2022-11-30. Retrieved 2024-11-08.
- ↑ Wallen, Jack (2016-06-17). "Lock Up Your Untrusted Applications in Firejail". Linux.com. Retrieved 2024-11-08.