[GH-ISSUE #2215] [Question] Do Apps Automatically use FireJail when Configured? #1486

Closed
opened 2026-05-05 08:09:23 -06:00 by gitea-mirror · 2 comments
Owner

Originally created by @asdfghjz on GitHub (Oct 25, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2215

Sorry, for my noob questions but, if I config an app in the Configuration Wizard whenever I open the app will it utilize FireJail? Without having to use any commands?

Question 2: Also, can "Jailed" be accessed by non Jailed apps? Like if I wanted to keep some Data safe?
Is this possible?

Originally created by @asdfghjz on GitHub (Oct 25, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/2215 Sorry, for my noob questions but, if I config an app in the Configuration Wizard whenever I open the app will it utilize FireJail? Without having to use any commands? Question 2: Also, can "Jailed" be accessed by non Jailed apps? Like if I wanted to keep some Data safe? Is this possible?
gitea-mirror 2026-05-05 08:09:23 -06:00
Author
Owner

@smitsohu commented on GitHub (Oct 30, 2018):

if I config an app in the Configuration Wizard whenever I open the app will it utilize FireJail? Without having to use any commands?

No. The Wizard allows you to run an app in a sandbox, without having to edit configuration files or to type commands in a terminal. But every time you want it sandboxed, you'll have to start it through the Wizard.

It is possible though to run programs always sandboxed. Open a terminal and run sudo firecfg, and there you are. It will automatically sandbox all programs for which there is a profile. You can undo this with sudo firecfg --clean

Question 2: Also, can "Jailed" be accessed by non Jailed apps? Like if I wanted to keep some Data safe?

Yes. The sandbox only restricts the processes that are running inside. I think the general recommendation would be rather to rely on encryption for what you want to do. You can then use Firejail as a second defense layer and blacklist the places where you store sensitive data.

<!-- gh-comment-id:434272746 --> @smitsohu commented on GitHub (Oct 30, 2018): > if I config an app in the Configuration Wizard whenever I open the app will it utilize FireJail? Without having to use any commands? No. The Wizard allows you to run an app in a sandbox, without having to edit configuration files or to type commands in a terminal. But every time you want it sandboxed, you'll have to start it through the Wizard. It is possible though to run programs always sandboxed. Open a terminal and run `sudo firecfg`, and there you are. It will automatically sandbox all programs for which there is a profile. You can undo this with `sudo firecfg --clean` > Question 2: Also, can "Jailed" be accessed by non Jailed apps? Like if I wanted to keep some Data safe? Yes. The sandbox only restricts the processes that are running inside. I think the general recommendation would be rather to rely on encryption for what you want to do. You can then use Firejail as a second defense layer and blacklist the places where you store sensitive data.
Author
Owner

@chiraag-nataraj commented on GitHub (Dec 9, 2018):

Looks like this question has been answered, so I'm going to go ahead and close this. @asdfghjz, feel free to re-open if you have more questions in response to @smitsohu's answer.

<!-- gh-comment-id:445508602 --> @chiraag-nataraj commented on GitHub (Dec 9, 2018): Looks like this question has been answered, so I'm going to go ahead and close this. @asdfghjz, feel free to re-open if you have more questions in response to @smitsohu's answer.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1486
No description provided.