[GH-ISSUE #1667] Running unjailed programs from within jail #1125

New issue

Closed

opened 2026-05-05 07:30:07 -06:00 by gitea-mirror · 3 comments

gitea-mirror commented

2026-05-05 07:30:07 -06:00

Owner

Originally created by @metasyntacticQuux on GitHub (Dec 2, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1667

Is there a way to have a jailed program execute unjailed programs with full permissions? I've intentionally jailed my Firefox in such a way that it cannot access my personal documents. I've created a program to handle downloading files, and it works perfectly without firejail. I need it to run outside of the jail when Firefox launches it from within the jail.

Originally created by @metasyntacticQuux on GitHub (Dec 2, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1667 Is there a way to have a jailed program execute unjailed programs with full permissions? I've intentionally jailed my Firefox in such a way that it cannot access my personal documents. I've created a program to handle downloading files, and it works perfectly without firejail. I need it to run outside of the jail when Firefox launches it from within the jail.

gitea-mirror closed this issue

2026-05-05 07:30:09 -06:00

gitea-mirror commented

2026-05-05 07:30:11 -06:00

Author

Owner

@SkewedZeppelin commented on GitHub (Dec 2, 2017):

That would allow the jailed program to easily escape. So no. I'm sure there is an issue that describes it some more, but I cannot find one right now.

@SkewedZeppelin commented on GitHub (Dec 2, 2017): That would allow the jailed program to easily escape. So no. I'm sure there is an issue that describes it some more, but I cannot find one right now.

gitea-mirror commented

2026-05-05 07:30:12 -06:00

Author

Owner

@metasyntacticQuux commented on GitHub (Dec 3, 2017):

Sorry, I meant whitelisting which programs can be run outside of the jail. Obviously if you can run any program you can do anything.

@metasyntacticQuux commented on GitHub (Dec 3, 2017): Sorry, I meant whitelisting which programs can be run outside of the jail. Obviously if you can run any program you can do anything.

gitea-mirror commented

2026-05-05 07:30:14 -06:00

Author

Owner

@reinerh commented on GitHub (Dec 3, 2017):

It's not possible. Once the seccomp filters and other restrictions are in place, they affect all the forked programs.

@reinerh commented on GitHub (Dec 3, 2017): It's not possible. Once the seccomp filters and other restrictions are in place, they affect all the forked programs.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1125

No description provided.

Rows
Columns