[GH-ISSUE #1603] Allow nesting of sandboxes #1070

New issue

Closed

opened 2026-05-05 07:24:58 -06:00 by gitea-mirror · 1 comment

gitea-mirror commented

2026-05-05 07:24:58 -06:00

Owner

Originally created by @marcthe12 on GitHub (Oct 13, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1603

I believe that we should be able to nest sandboxes. This could allow sandbox of more lower programs

Originally created by @marcthe12 on GitHub (Oct 13, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1603 I believe that we should be able to nest sandboxes. This could allow sandbox of more lower programs

gitea-mirror closed this issue

2026-05-05 07:24:59 -06:00

gitea-mirror commented

2026-05-05 07:25:01 -06:00

Author

Owner

@SkewedZeppelin commented on GitHub (Oct 13, 2017):

The permissions required to create the nested sandboxes are dropped upon creating the initial sandbox. Keeping those permissions would allow the programs inside the sandbox to very easily escape.

See https://github.com/netblue30/firejail/issues/1256#issuecomment-298379932

@SkewedZeppelin commented on GitHub (Oct 13, 2017): The permissions required to create the nested sandboxes are dropped upon creating the initial sandbox. Keeping those permissions would allow the programs inside the sandbox to very easily escape. See https://github.com/netblue30/firejail/issues/1256#issuecomment-298379932

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1070

No description provided.

Rows
Columns