[GH-ISSUE #2371] Making cgroup feature configurable in firejail.config #1580

Closed
opened 2026-05-05 08:14:16 -06:00 by gitea-mirror · 3 comments
Owner

Originally created by @reinerh on GitHub (Jan 27, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2371

Currently some functionality can be globally disabled in /etc/firejail/firejail.config.
Can you please extend it to allow disabling --cgroup?
Some users might want to disallow that as it can place the process in a different cgroup with different restrictions.

Originally created by @reinerh on GitHub (Jan 27, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/2371 Currently some functionality can be globally disabled in /etc/firejail/firejail.config. Can you please extend it to allow disabling `--cgroup`? Some users might want to disallow that as it can place the process in a different cgroup with different restrictions.
gitea-mirror 2026-05-05 08:14:16 -06:00
Author
Owner

@netblue30 commented on GitHub (Jan 27, 2019):

all set: a061b3f3d4

<!-- gh-comment-id:457949118 --> @netblue30 commented on GitHub (Jan 27, 2019): all set: https://github.com/netblue30/firejail/commit/a061b3f3d43d760f074ad49317f9659717ff7101
Author
Owner

@reinerh commented on GitHub (Jan 27, 2019):

Awesome, thanks.
I will probably backport it to Debian's 0.9.58 package, as this was mentioned in a bug report (https://bugs.debian.org/916920) and disable it in the default configuration.

<!-- gh-comment-id:457949356 --> @reinerh commented on GitHub (Jan 27, 2019): Awesome, thanks. I will probably backport it to Debian's 0.9.58 package, as this was mentioned in a bug report (https://bugs.debian.org/916920) and disable it in the default configuration.
Author
Owner

@netblue30 commented on GitHub (Jan 28, 2019):

No problem, and thanks for the fix! Somehow I've missed strncmp!

<!-- gh-comment-id:457972906 --> @netblue30 commented on GitHub (Jan 28, 2019): No problem, and thanks for the fix! Somehow I've missed strncmp!
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1580
No description provided.