mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #2215] [Question] Do Apps Automatically use FireJail when Configured? #1486
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#1486
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @asdfghjz on GitHub (Oct 25, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2215
Sorry, for my noob questions but, if I config an app in the Configuration Wizard whenever I open the app will it utilize FireJail? Without having to use any commands?
Question 2: Also, can "Jailed" be accessed by non Jailed apps? Like if I wanted to keep some Data safe?
Is this possible?
@smitsohu commented on GitHub (Oct 30, 2018):
No. The Wizard allows you to run an app in a sandbox, without having to edit configuration files or to type commands in a terminal. But every time you want it sandboxed, you'll have to start it through the Wizard.
It is possible though to run programs always sandboxed. Open a terminal and run
sudo firecfg, and there you are. It will automatically sandbox all programs for which there is a profile. You can undo this withsudo firecfg --cleanYes. The sandbox only restricts the processes that are running inside. I think the general recommendation would be rather to rely on encryption for what you want to do. You can then use Firejail as a second defense layer and blacklist the places where you store sensitive data.
@chiraag-nataraj commented on GitHub (Dec 9, 2018):
Looks like this question has been answered, so I'm going to go ahead and close this. @asdfghjz, feel free to re-open if you have more questions in response to @smitsohu's answer.