- Home
- Sandbox Software
- Firejail
Firejail
What it is
Firejail is a free, self-hosted Linux program for restricting applications and processes. It uses Linux namespaces and seccomp-bpf so sandboxed programs receive private views of network, process and mount tables. The project supports Linux computers with a 3.x kernel or newer and can sandbox servers, graphical applications and login sessions. Controls include protocol filtering, noroot user namespaces, Linux capabilities, D-BUS filtering and optional AppArmor or SELinux support. Mandatory Access Control can block more than 1,000 desktop applications from passwords, encryption keys and private data, while more than 1,000 profiles are available in /etc/firejail. Firejail can create an isolated TCP/IP stack with routing, firewall and interfaces, and its nettrace feature inspects traffic. AppImage packages are supported. Firetools adds a Qt5 graphical launcher and manager; FDNS supplies DNS-over-HTTPS through non-logging providers. Firejail targets home users and Linux beginners, not enterprise deployments.
For and against
For
- Linux namespace and seccomp-bpf isolation
- More than 1,000 default application profiles
- Optional AppArmor or SELinux support
- Isolated TCP/IP stack and traffic inspection
- Firetools graphical management interface
Against
- Linux-only
- Focused on consumer use, not enterprise
- Requires self-hosted setup
The verdict
Firejail offers layered process, file and network restrictions for Linux desktops and other local workloads. Its tooling includes command-line controls plus Firetools and FDNS companions.
Who it suits
Firejail suits Linux home users and beginners who want to isolate desktop programs, servers or login sessions on self-hosted systems.
Plans and prices
Firejail community project
Linux desktop focus · GPL v2 · no commercial goals
Read 30 Sep 2026 · firejail.wordpress.com
On the record
- Access control
- Mandatory Access Control blocks access to passwords, encryption keys, and private data for more than 1000 desktop applications.firejail.wordpress.com · read 30 Sep 2026
- AppImage support
- Firejail natively supports AppImage packages through the --appimage option.firejail.wordpress.com · read 30 Sep 2026
- Application coverage
- Firejail can sandbox servers, graphical applications, and user login sessions.firejail.wordpress.com · read 30 Sep 2026
- Desktop integration
- Running sudo firecfg integrates Firejail with application menus and file-manager launches.firejail.wordpress.com · read 30 Sep 2026
- DNS companion
- FDNS is a DNS-over-HTTPS proxy that uses DoH services from non-logging providers.firejail.wordpress.com · read 30 Sep 2026
- GUI companion
- Firetools is a Qt5 graphical interface providing a sandbox launcher, system-tray integration, editing, management, and statistics.firejail.wordpress.com · read 30 Sep 2026
- Kernel support
- The software runs on Linux computers with a 3.x kernel version or newer.firejail.wordpress.com · read 30 Sep 2026
- Network isolation
- Firejail can create an isolated TCP/IP stack with its own routing table, firewall, and interfaces.firejail.wordpress.com · read 30 Sep 2026
- Network monitoring
- The software can inspect network traffic with its nettrace feature for analyzing and monitoring application behavior.firejail.wordpress.com · read 30 Sep 2026
- Process isolation
- Sandboxed processes receive private views of shared kernel resources including the network, process, and mount tables.firejail.wordpress.com · read 30 Sep 2026
- Sandboxing
- Firejail is a SUID program that restricts untrusted applications using Linux namespaces and seccomp-bpf.firejail.wordpress.com · read 30 Sep 2026
- Security controls
- Security filters include seccomp-bpf, communication protocol filtering, noroot user namespaces, Linux capabilities, D-BUS filtering, and optional AppArmor or SELinux support.firejail.wordpress.com · read 30 Sep 2026
- Security profiles
- More than 1000 application profiles are available by default in /etc/firejail.firejail.wordpress.com · read 30 Sep 2026
- Support
- The project directs support questions to its GitHub wiki and asks users to report security bugs by email.firejail.wordpress.com · read 30 Sep 2026
- Target users
- The project identifies home users and Linux beginners as its target market and describes Firejail as a consumer product rather than an enterprise product.firejail.wordpress.com · read 30 Sep 2026
