[GH-ISSUE #2662] 'sudo firejail --apparmor' = Root shell #1676

Closed
opened 2026-05-05 08:19:27 -06:00 by gitea-mirror · 1 comment
Owner

Originally created by @VltraHeaven on GitHub (Apr 23, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2662

Hey, I noticed that when I run 'sudo firejail --apparmor' as my admin user account I get spit into a root shell. My account is a sudoer and is in the 'firejail.users' file. Is this behaviour intended or known?

Tested on the following systems:
-Linux Pop!OS
-4.18.0-17-generic #18~18.04.1-Ubuntu x86_64 x86_64 x86_64 GNU/Linux
-firejail - version 0.9.52

and

-Linux 4.19.0-kali4-amd64 #1 SMP Debian
-4.19.28-2kali1 (2019-03-18) x86_64 GNU/Linux
-firejail - firejail - version 0.9.58.2

Originally created by @VltraHeaven on GitHub (Apr 23, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/2662 Hey, I noticed that when I run 'sudo firejail --apparmor' as my admin user account I get spit into a root shell. My account is a sudoer and is in the 'firejail.users' file. Is this behaviour intended or known? Tested on the following systems: -Linux Pop!OS -4.18.0-17-generic #18~18.04.1-Ubuntu x86_64 x86_64 x86_64 GNU/Linux -firejail - version 0.9.52 and -Linux 4.19.0-kali4-amd64 #1 SMP Debian -4.19.28-2kali1 (2019-03-18) x86_64 GNU/Linux -firejail - firejail - version 0.9.58.2
gitea-mirror 2026-05-05 08:19:27 -06:00
Author
Owner

@Vincent43 commented on GitHub (Apr 23, 2019):

Yes, sudo makes you root. If you want use firejail as unprivileged user run firejail --apparmor without sudo.

<!-- gh-comment-id:485748962 --> @Vincent43 commented on GitHub (Apr 23, 2019): Yes, `sudo` makes you root. If you want use firejail as unprivileged user run `firejail --apparmor` without sudo.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1676
No description provided.