[GH-ISSUE #3213] [Question] How to use firejail only for certain apps? #2012

Closed
opened 2026-05-05 08:40:53 -06:00 by gitea-mirror · 2 comments
Owner

Originally created by @ericschdt on GitHub (Feb 9, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3213

As far as I see it, once installed, firejail will try to sandbox all programs for which it has profiles. However, on one of my systems I trust most of the programs, except a few, which I would like to sandbox only, like Spotify or Steam games.

Is there easy way to achieve this without deleting manually all symlinks in /usr/local/bin/?
I haven't found a command to unsandbox all and then to sandbox just certain apps.

Originally created by @ericschdt on GitHub (Feb 9, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3213 As far as I see it, once installed, firejail will try to sandbox all programs for which it has profiles. However, on one of my systems I trust most of the programs, except a few, which I would like to sandbox only, like Spotify or Steam games. Is there easy way to achieve this without deleting manually all symlinks in `/usr/local/bin/`? I haven't found a command to unsandbox all and then to sandbox just certain apps.
gitea-mirror 2026-05-05 08:40:53 -06:00
Author
Owner

@rusty-snake commented on GitHub (Feb 9, 2020):

$ sudo firecfg --clean
$ sudo ln -s /usr/bin/firejail /usr/local/bin/PROGRAM
<!-- gh-comment-id:583839407 --> @rusty-snake commented on GitHub (Feb 9, 2020): ``` $ sudo firecfg --clean $ sudo ln -s /usr/bin/firejail /usr/local/bin/PROGRAM ```
Author
Owner

@ericschdt commented on GitHub (Feb 9, 2020):

That seems to be too easy. Thanks!

<!-- gh-comment-id:583839560 --> @ericschdt commented on GitHub (Feb 9, 2020): That seems to be too easy. Thanks!
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2012
No description provided.