Firejail
A lightweight SUID sandbox for Linux that uses namespaces, seccomp-bpf, and capabilities to restrict application access.
What is Firejail?
Firejail is a lightweight SUID sandbox program for Linux that uses kernel security features like namespaces, seccomp-bpf, and capabilities to create restricted environments for running applications. It helps mitigate security risks by isolating processes and limiting their access to system resources, making it suitable for sandboxing servers, graphical apps, and user sessions.
Linux system administrators, security-conscious developers, and users who need to run untrusted applications in isolated environments without heavy virtualization overhead.
Firejail offers a simple, low-overhead sandboxing solution that integrates directly with Linux kernel features, requires no complex configuration or running daemons, and includes pre-built profiles for many common applications.
Overview
Linux namespaces and seccomp-bpf sandbox
Use Cases
Best For
- Running untrusted web browsers like Firefox or Chromium in a restricted environment
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
