github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #241] Start application with firejail --seccomp or not? #169

New issue

Closed

opened 2026-05-05 05:13:42 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 05:13:42 -06:00

Owner

Originally created by @Goderw on GitHub (Jan 20, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/241

Hello,

it isn`t an issue at all, but in the Arch-Linux-Wiki they say that firejail has to start with "firejail --seccomp firefox" for example. In your "wiki" I can read --seccomp isn't neccessary because there is a filter list for firefox anyway.

Well, which setting gives the most protection to start Firefox in this case -> With --seccomp or w/o?

Thanks for this great invention!!

Originally created by @Goderw on GitHub (Jan 20, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/241 Hello, it isn`t an issue at all, but in the Arch-Linux-Wiki they say that firejail has to start with "firejail --seccomp firefox" for example. In your "wiki" I can read --seccomp isn't neccessary because there is a filter list for firefox anyway. Well, which setting gives the most protection to start Firefox in this case -> With --seccomp or w/o? Thanks for this great invention!!

gitea-mirror

2026-05-05 05:13:42 -06:00

closed this issue
added the
information_old
label

gitea-mirror commented

2026-05-05 05:13:48 -06:00

Author

Owner

@Goderw commented on GitHub (Jan 20, 2016):

Additionally:
I have testet both... and in both cases "grep Seccomp /proc//status" shows that seccomp 2 is enabled. So I think I can run "firejail firefox" w/o --seccomp in line!

@Goderw commented on GitHub (Jan 20, 2016): Additionally: I have testet both... and in both cases "grep Seccomp /proc/<PID>/status" shows that _seccomp 2_ is enabled. So I think I can run "firejail firefox" w/o --seccomp in line!

gitea-mirror commented

2026-05-05 05:13:50 -06:00

Author

Owner

@netblue30 commented on GitHub (Jan 20, 2016):

It is not necessary anymore. I've made it default.

@netblue30 commented on GitHub (Jan 20, 2016): It is not necessary anymore. I've made it default.

gitea-mirror referenced this issue

2026-05-05 10:03:33 -06:00

[PR #169] [MERGED] blacklist ncat #3553

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#169

No description provided.

Rows
Columns

[GH-ISSUE #241] Start application with *firejail --seccomp* or not? #169

[GH-ISSUE #241] Start application with firejail --seccomp or not? #169