[GH-ISSUE #2270] Memory Limit #1518

New issue

Closed

opened 2026-05-05 08:10:49 -06:00 by gitea-mirror · 3 comments

gitea-mirror commented

2026-05-05 08:10:49 -06:00

Owner

Originally created by @silgon on GitHub (Nov 23, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2270

Is there a way to limit the memory that a process uses with firejail (0.9.56-LTS). I'm interested in using it with thunderbird. So maybe there is something to be written in the profile? I don't find any documentation about it.

Also, in the man file, I found RES Resident Memory Size (KiB), sandbox non-swapped physical memory. It is a sum of the RES values for all processes running in the sandbox. but I have no idea how or where to apply it.

Thanks in advance.

Originally created by @silgon on GitHub (Nov 23, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/2270 Is there a way to limit the memory that a process uses with `firejail (0.9.56-LTS)`. I'm interested in using it with thunderbird. So maybe there is something to be written in the profile? I don't find any documentation about it. Also, in the man file, I found `RES Resident Memory Size (KiB), sandbox non-swapped physical memory. It is a sum of the RES values for all processes running in the sandbox.` but I have no idea how or where to apply it. Thanks in advance.

gitea-mirror

2026-05-05 08:10:49 -06:00

closed this issue
added the
information_old
label

gitea-mirror commented

2026-05-05 08:10:53 -06:00

Author

Owner

@smitsohu commented on GitHub (Dec 5, 2018):

We have something in Firejail ( --rlimit-as), but not in the LTS version.

As an alternative consider prlimit, it doesn't need any root privileges. The prlimit man pages fails to mention however that limits on RSS are without effect in contemporary kernels.
But something like prlimit --as=50000000 firejail should be possible.

@smitsohu commented on GitHub (Dec 5, 2018): We have something in Firejail ( `--rlimit-as`), but not in the LTS version. As an alternative consider [prlimit](http://man7.org/linux/man-pages/man1/prlimit.1.html), it doesn't need any root privileges. The prlimit man pages fails to mention however that limits on RSS are without effect in contemporary kernels. But something like `prlimit --as=50000000 firejail` should be possible.

gitea-mirror commented

2026-05-05 08:10:54 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (May 20, 2019):

@silgon, is this still an issue? Were you able to upgrade your firejail to take advantage of the feature?

@chiraag-nataraj commented on GitHub (May 20, 2019): @silgon, is this still an issue? Were you able to upgrade your firejail to take advantage of the feature?

gitea-mirror commented

2026-05-05 08:10:55 -06:00

Author

Owner

@silgon commented on GitHub (May 20, 2019):

Sorry, I'm not using it anymore, so I couldn't tell. I'll close the issue for now. Thanks for the update. =)

@silgon commented on GitHub (May 20, 2019): Sorry, I'm not using it anymore, so I couldn't tell. I'll close the issue for now. Thanks for the update. =)

gitea-mirror referenced this issue

2026-05-05 09:41:56 -06:00

[GH-ISSUE #5640] firejail holds device mapper node preventing LUKS2/cryptsetup from being closed #3053

gitea-mirror referenced this issue

2026-05-05 10:40:39 -06:00

[PR #5579] [CLOSED] profiles: ssh: allow ~/.ansible/cp #5558