Firejail
A SUID program that restricts the running environment of untrusted applications using the
Firejail is a SUID program for Linux that restricts the running environment of untrusted applications using Linux namespaces and seccomp-bpf. It gives a process and its descendants a private view of shared kernel resources such as the network stack, process table and mount table. Written in C with virtually no dependencies, it runs on any Linux computer with a 3.x kernel version or newer. The sandbox is lightweight, with low overhead, no complicated configuration files, no open socket connections and no background daemons. It can sandbox servers, graphical applications and user login sessions, and is released under the GPL v2 license.
Firejail uses Linux namespaces, Mandatory Access Control, seccomp-bpf system call filters, communication protocol filtering, noroot user namespaces, Linux capabilities, X11 sandboxing via Xpra and Xephyr, D-BUS filtering, and AppArmor and SELinux support when available. It can attach an isolated TCP/IP stack with its own routing table, firewall and interfaces, with iptables and dynamic firewall support, plus network traffic inspection and monitoring. Security profiles in /etc/firejail cover more than 1000 applications, and AppImage packages can be mounted and run with the --appimage option. Monitoring includes CPU, memory and bandwidth usage, system call tracing, exec and fork event monitoring, and logging of accesses to blacklisted files. The jailcheck auditing tool examines running sandboxes for configuration problems. Firetools is a separate Qt5 graphical interface providing a system tray launcher, sandbox editing, management and statistics. FDNS is a DNS over HTTPS proxy server.
Firejail is aimed at home users and Linux beginners, with the project focused on the Linux desktop. It is a community project released under the GPL v2 license, with no commercial editions, free plans, trials or seat-based or usage-based packaging described.
12 alternatives to Firejail
Ranked by how well each tool replaces Firejail: shared features, audience, price and popularity.
- 57 out of 100 matchContact sales
The most advanced Penetration Testing Distribution. Ever.
Covers 4 of 15 key features.
Free planOpen source57 out of 100 matchFreeconsensual browsing! - My browser, my choice.
Covers 5 of 15 key features.
Free planOpen source57 out of 100 matchContact salesThe operating system for cybersecurity operations
Covers 1 of 15 key features.
Free planOpen source56 out of 100 matchContact salesFree automated malware analysis service powered by CrowdStrike Falcon Sandbox
Covers 1 of 15 key features.
Free plan56 out of 100 matchFree- 56 out of 100 match—
- 55 out of 100 matchContact sales
Information Security software for open computing environments, related publications, and a
Covers 9 of 15 key features.
Free planOpen source55 out of 100 matchContact salesA complete suite of tools for assessing WiFi network security
Covers 3 of 15 key features.
Open source55 out of 100 match—WordPress security plugin with firewall, malware scanning, and threat intelligence.
Covers 1 of 15 key features.
Free plan54 out of 100 matchContact sales- 54 out of 100 matchContact sales
Personal firewall and network monitor for Windows PCs and servers, plus an Android version
Covers 3 of 15 key features.
Free plan54 out of 100 match$2.99/mo