[GH-ISSUE #892] Ability to turn off pid namespacing? #605

New issue

Closed

opened 2026-05-05 06:15:56 -06:00 by gitea-mirror · 1 comment

gitea-mirror commented

2026-05-05 06:15:56 -06:00

Owner

Originally created by @gi11es on GitHub (Nov 4, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/892

Related to #862 and my quest to manipulate cgroup assignment for subprocesses of a firejailed process, accessing the cgroup vfs is one thing, but in order to add a subprocess to a cgroup, one needs to know its true pid. But firejail namespaces the pids, which makes knowing the real pid impossible.

I couldn't find a way to turn off pid namespacing, did I miss something? Out of curiosity, is it a deliberate feature or a side-effect of some system folder/file being hidden by firejail?

Anyway, if you have any idea on how pid namespacing could be turned off, it would be greatly appreciated.

Originally created by @gi11es on GitHub (Nov 4, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/892 Related to #862 and my quest to manipulate cgroup assignment for subprocesses of a firejailed process, accessing the cgroup vfs is one thing, but in order to add a subprocess to a cgroup, one needs to know its true pid. But firejail namespaces the pids, which makes knowing the real pid impossible. I couldn't find a way to turn off pid namespacing, did I miss something? Out of curiosity, is it a deliberate feature or a side-effect of some system folder/file being hidden by firejail? Anyway, if you have any idea on how pid namespacing could be turned off, it would be greatly appreciated.

gitea-mirror

2026-05-05 06:15:56 -06:00

closed this issue
added the
information_old
label

gitea-mirror commented

2026-05-05 06:16:03 -06:00

Author

Owner

@netblue30 commented on GitHub (Nov 5, 2016):

You cannot turn off PID namespace, it is hardcoded deep inside the program. If you do "ps aux" outside of sandbox you can see the real PID for all sandboxed processes.

@netblue30 commented on GitHub (Nov 5, 2016): You cannot turn off PID namespace, it is hardcoded deep inside the program. If you do "ps aux" outside of sandbox you can see the real PID for all sandboxed processes.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#605

No description provided.

Rows
Columns