Firejail

No entries match these filters. Clear filters

1. 0.9.82 Nov 2, 2026 · issue 129

   Firejail adds ${PROJECTS}, ${PUBLICSHARE}, ${TEMPLATES} XDGXDGA set of specifications maintained by freedesktop.org that standardise where Linux applications store config, data, and cache files, letting tools respect user-defined paths instead of hardcoding locations. macros, subpath support in XDG macros, syscall:log for audit-mode seccomp, a @program-keep syscall group, and profstats --include.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 0.9.82 https://github.com/netblue30/firejail.git
   # already have the repo? check out this version:
   $ git checkout 0.9.82

   • Add ${PROJECTS}, ${PUBLICSHARE}, and ${TEMPLATES} macros to profile files for referencing XDG user directories.
   • Allow subpaths in XDG macros in profile files, so paths like ${DOCUMENTS}/reports are now valid.
   • Implement syscall:log in seccomp lists to log rather than block a syscall, enabling audit-style profiling.
   • Add the profstats tool's --include command-line option to filter profile statistics.
   • Add a new @program-keep syscall group for seccomp allowlists.

   5 details in Everything

   • New supported platform New application sandbox profiles
   • New supported platform llm-agent-common base profile
   └──▷ BREAKING ON UPGRADE

   • !--x11=xpra support is removed; profiles or scripts using it will error.
   • !--x11=xephyr is removed as a direct option; Xephyr is now used automatically by --x11.
   • !--x11=xorg and --x11=xvfb are disabled in the default build; re-enabling requires ./configure --enable-x11-legacy.
   • !--ip=dhcp is temporarily disabled; sandboxes relying on DHCP assignment will not start.
   • !--bandwidth= is removed; any profile or script using it will error.
   • !--tracelog and --blacklist-nolog are removed; profiles or scripts using them will error.
   • !--private-home is removed; profiles or scripts using it will error.
   • !private-lib profile feature is removed; profiles using it will error.
   • !SSH restricted shell feature is removed.
   • !firecfg --guide is removed; the guidance is now in man firejail.
   • !./configure --enable-busybox-workaround and ./configure --disable-sandbox-check options are removed.
   • !--chroot= is disabled in the default build; re-enabling requires ./configure --enable-chroot.
2. 0.9.80 Mar 14, 2026 · release notes

   Firejail 0.9.80 adds PID 1 hiding, hostname randomization, and a new --debug-syscall-groups command.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 0.9.80 https://github.com/netblue30/firejail.git
   # already have the repo? check out this version:
   $ git checkout 0.9.80

   └──▷ TRY IT
   Inspect which syscalls belong to each seccomp group before writing a custom seccomp policy.
   copy

   $ firejail --debug-syscall-groups --seccomp firefox

   Re-enable randomized sandbox hostnames for a profile that does not use X11 and benefits from hostname isolation.
   copy

   $ firejail --hostname-randomize --profile=./custom.profile curl https://example.com

   Run a sandboxed process while keeping PID 1 visible inside the sandbox, matching pre-0.9.80 behavior.
   copy

   $ firejail --unhide-pid1 --profile=./myapp.profile myapp

   • Adds --unhide-pid1 command to optionally expose PID 1 inside the sandbox, which is now hidden by default.
   • Adds --hostname-randomize command and profile option to opt into randomized sandbox hostnames (no longer the default).
   • Adds --debug-syscall-groups command for inspecting resolved syscall groups during seccomp policy development.
   • Adds AppArmorAppArmorA Linux kernel security module, maintained as part of the kernel, that confines programs to a declared set of files, capabilities, and network access — letting cyber tools sandbox processes without writing custom kernel code. profiles for the --nettrace command, enabling confined network tracing.
   • Makes Xephyr the default backend for --x11, replacing Xpra.

   +3 more show less

   • Adds new application profiles: fragments, srb2, zen/zen-bin/zen-browser, and halloy IRC client.
   • Supports Deno JavaScript engine and browser cookies in the yt-dlp profile.
   • Requires a full or relative file path for --profile=FILE — using a bare filename is no longer accepted for security reasons.

   8 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The --profile=FILE option now requires a full or relative path; passing a bare filename will be rejected.
   • !PID 1 is now hidden inside the sandbox by default; use --unhide-pid1 to restore previous behavior.
   • !Hostname randomization is no longer active by default; use --hostname-randomize to re-enable it.
   • !Xephyr is now the default for --x11, replacing Xpra.
   • !The ./configure --disable-man build option has been removed.
   • !The ./configure --disable-usertmpfs build option has been removed.
3. 0.9.78 Jan 21, 2026 · release notes

   Firejail 0.9.78 adds argument/environment limits, Xephyr params, a bwrap compatibility shim, and new app profiles.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 0.9.78 https://github.com/netblue30/firejail.git
   # already have the repo? check out this version:
   $ git checkout 0.9.78

   └──▷ TRY IT
   Force use of the real bwrap inside the sandbox when an application explicitly requires it (overriding the default fbwrap shim).
   copy

   $ firejail --allow-bwrap /usr/bin/gnome-image-viewer

   • Adds arg-max-count and arg-max-len settings to firejail.config to cap the number and length of arguments passed to sandboxed programs.
   • Adds env-max-count and env-max-len settings to firejail.config to cap the number and length of environment variables in the sandbox.
   • New --xephyr-extra-params= command allows passing additional parameters to Xephyr when running sandboxed X11 sessions.
   • New --allow-bwrap command forces use of the real bubblewrap (bwrap) binary; by default, Firejail now substitutes a dummy fbwrap program to work around glycin 2.0.0/gdk-pixbuf2 compatibility issues.
   • Adds new sandbox profiles for: ne (text editor), trivalent, openra, gzdoom/lzdoom/uzdoom, and quakespasm.

   +1 more show less

   • rlimit values now accept uppercase suffixes (e.g., K, M, G) for human-readable resource limit configuration.

   6 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The --disable-globalcfg configure option has been removed; any build scripts using it will fail.
   • !Overlayfs support and the --overlay commands have been removed; profiles or scripts relying on --overlay will break.
   • !The Intrusion Detection System (IDSIDSAn intrusion detection system, monitoring traffic or host activity for suspicious behavior and producing alerts. Detection alone does not necessarily block the activity.) / fids component has been removed; any workflows invoking fids will break.
4. 0.9.76 Jul 30, 2025 · release notes

   Firejail 0.9.76 adds a warn profile command, glob support for /dev paths, and renames notpm to keep-dev-tpm.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 0.9.76 https://github.com/netblue30/firejail.git
   # already have the repo? check out this version:
   $ git checkout 0.9.76

   • Adds warn profile command to emit warnings during sandbox setup without aborting.
   • Supports globbing in hardcoded numbered /dev paths, allowing flexible device matching in profiles.
   • Introduces non-blocking flock calls, reducing sandbox startup contention.
   • Replaces the notpm command with keep-dev-tpm, which retains TPMTPMA dedicated hardware chip, standardized by the Trusted Computing Group, that stores cryptographic keys and measurements in tamper-resistant silicon, giving cyber tools a root of trust that software alone cannot fake.-related devices (/dev/tpm*, /dev/tpmrm*, /dev/tcm*, /dev/tcmrm*) and the tss group when used.
   • Adds new sandbox profile for Ansel photo editing application.

   5 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The notpm command is removed and replaced by keep-dev-tpm; profiles using notpm must be updated to use keep-dev-tpm instead.
5. 0.9.74 Mar 25, 2025 · release notes

   Firejail 0.9.74 adds Landlock support, QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking./HTTP3 nettrace, random sandbox hostnames, IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. net.print, and aarch64 syscalls.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 0.9.74 https://github.com/netblue30/firejail.git
   # already have the repo? check out this version:
   $ git checkout 0.9.74

   └──▷ TRY IT
   Override the auto-assigned random sandbox hostname to a predictable name for scripted environments.
   copy

   $ firejail --hostname=mysandbox --private curl https://example.com

   • Adds QUIC (HTTP/3HTTP/3The third major version of HTTP, standardized by the IETF, which runs over QUIC instead of TCP, eliminating head-of-line blocking and reducing connection latency for faster, more resilient data transfer.) protocol support in --nettrace for visibility into modern encrypted traffic.
   • Adds stats collection support to --nettrace.
   • Adds IPv6 support for the --net.print option.
   • Assigns a random hostname to each sandbox by default unless overridden with --hostname.
   • Adds new keep-shell-rc command and option to preserve shell RC files inside the sandbox.

   +11 more show less

   • Adds seccomp filters for --restrict-namespaces to harden namespace restriction.
   • Adds doas support in firecfg and jailcheck alongside existing sudo support.
   • Adds firecfg.d drop-in directory and new ignore command to firecfg for modular configuration overrides.
   • Expands simple macro expansion to --chroot=, --netfilter=, --netfilter6=, and --trace= options.
   • Adds support for comm, coredump, and prctl process events in firemon.
   • Adds notpm command and keeps TPMTPMA dedicated hardware chip, standardized by the Trusted Computing Group, that stores cryptographic keys and measurements in tamper-resistant silicon, giving cyber tools a root of trust that software alone cannot fake. devices accessible in private-dev.
   • Adds keep-dev-ntsync command and blocks /dev/ntsync by default.
   • Adds aarch64 syscall definitions for seccomp filtering on ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead..
   • Adds --disable-sandbox-check configure flag to skip sandbox capability checks at build time.
   • Adds private-etc groups support and improves /etc/resolv.conf handling in private-etc.
   • Adds NixOS support for tc traffic shaping in fshaper.sh.

   16 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The --interface option is removed from firemon; use firejail --net.print= instead.
   • !Support for LTS and firetunnel is removed.
   • !private-lib is now disabled by default at configure time; re-enable with --enable-private-lib.
   • !Sandbox names (--name=) and hostnames (--hostname=) may no longer consist entirely of digits, and are now restricted to mostly ASCII letters and digits.
   • !Firejail no longer forwards its own -- double-dash to the shell.
6. 0.9.72 Jan 16, 2023 · release notes

   Firejail 0.9.72 adds --restrict-namespaces, --apparmor=, network trace commands, and custom profile profiles

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 0.9.72 https://github.com/netblue30/firejail.git
   # already have the repo? check out this version:
   $ git checkout 0.9.72

   • Adds --restrict-namespaces flag to restrict the creation of Linux namespaces via seccomp filter
   • Adds --apparmor= flag to support custom AppArmorAppArmorA Linux kernel security module, maintained as part of the kernel, that confines programs to a declared set of files, capabilities, and network access — letting cyber tools sandbox processes without writing custom kernel code. profiles
   • Adds --dnstrace, --icmptrace, and --snitrace commands for network tracing
   • Adds restrict-namespaces support in profile files

   4 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The --cgroup= command is removed
7. 0.9.70 Jun 9, 2022 · release notes

   Adds --tab for shell tab completion, --oom for OOMOOMAn out-of-memory condition: a program requests more memory than the system or device can provide. The allocation fails or the operating system may stop the process. killer control, firecfg --guide UI, and avahi .local resolution support

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 0.9.70 https://github.com/netblue30/firejail.git
   # already have the repo? check out this version:
   $ git checkout 0.9.70

   └──▷ USE IT
   Enable tab completion for commands inside a firejail shell session
   shell copy

   firejail --bash --tab

   Allow the kernel to kill the process if it exceeds memory limits instead of holding indefinitely
   shell copy

   firejail --oom=1 firefox

   Run the interactive guide to automatically configure file associations for your desktop environment
   shell copy

   firecfg --guide

   • Add --tab flag to enable shell tab completion within jailed environments
   • Add --oom flag to manage kernel OutOfMemory-killer behavior for the jail process
   • Add firecfg --guide subcommand to provide guided user configuration interface
   • Enable resolution of .local hostnames using avahi-daemon in the AppArmorAppArmorA Linux kernel security module, maintained as part of the kernel, that confines programs to a declared set of files, capabilities, and network access — letting cyber tools sandbox processes without writing custom kernel code. profile

   4 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !--ids feature must now be explicitly enabled at compile time (previously it may have been default)
   • !--nettrace option is now restricted to root user only
8. 0.9.68 Feb 6, 2022 · release notes

   Adds intrusion detection (ids), network monitoring/locking, deterministic shutdown, and several new subcommands in Firejail 0.9.68

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 0.9.68 https://github.com/netblue30/firejail.git
   # already have the repo? check out this version:
   $ git checkout 0.9.68

   • Adds --ids-init and --ids-check flags for the intrusion detection systemintrusion detection systemAn intrusion detection system, monitoring traffic or host activity for suspicious behavior and producing alerts. Detection alone does not necessarily block the activity. subsystem
   • Adds --nettrace flag as a network monitor feature
   • Adds --netlock flag as a network locker feature
   • Adds --deterministic-exit-code and --deterministic-shutdown flags for deterministic shutdown behavior
   • Adds noprinters subcommand

   +2 more show less

   • Adds --whitelist-ro profile command flag
   • Adds firecfg.config to /etc/firejail/ for configuration management

   7 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The --disable-whitelist flag is removed at compile time; the feature is no longer available.
   • !The whitelist=yes/no option is removed from /etc/firejail/firejail.config; existing configs using this key will likely fail validation or be ignored.
9. 0.9.66 Jun 29, 2021 · release notes

   Firejail 0.9.66 adds private-file isolation keys, zsh completion, jailtest utility, and new profiles

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 0.9.66 https://github.com/netblue30/firejail.git
   # already have the repo? check out this version:
   $ git checkout 0.9.66

   └──▷ USE IT
   Create a sandbox with a private file system entry using the new CLI flag
   shell copy

   firejail --mkfile=/home/user/data.txt /bin/bash

   Test the state of a running sandbox using the new utility
   shell copy

   jailtest <sandbox_pid>

   • Adds private-bin, private-etc, private-opt, private-srv, whitelist-disable-topdir, and seccomp-filter-add settings to firejail.config for finer sandbox file isolation
   • Adds zsh completion support for firejail commands
   • Introduces the jailtest utility for testing running sandboxes
   • Adds --mkdir and --mkfile command-line flags for creating sandbox-specific files/directories
   • Enables accumulation of multiple --protocol flags instead of overwriting previous settings

   +3 more show less

   • Adds faccessat2 syscall support in the default seccomp filter
   • Adds new application profiles including vmware-view, sway, tmux, cargo, and LibreCAD
   • Supports trailing comments on profile lines

   8 details in Everything

10. 0.9.64.2 Jan 28, 2021 · release notes

    Firejail 0.9.64.2 adds AF_BLUETOOTH support, netns in profiles, and numerous new app profiles.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.64.2 https://github.com/netblue30/firejail.git
    # already have the repo? check out this version:
    $ git checkout 0.9.64.2

    └──▷ USE IT
    Run an application with Bluetooth access enabled.
    shell copy

    firejail --protocol=bluetooth myapp

    • Adds --protocol=bluetooth to enable AF_BLUATOOTH access
    • Adds IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. network filter nolocal6.net
    • Allows --tmpfs inside $HOME for unprivileged users
    • Implements netns support in profiles
    • Adds new app profiles: spectacle, chromium-browser-privacy, gtk-straw-viewer, gtk-youtube-viewer, gtk2-youtube-viewer, gtk3-youtube-viewer, straw-viewer, lutris, dolphin-emu, authenticator-rs, servo, npm, marker, yarn, lsar, unar, agetpkg, mdr, shotwell, qnapi, guvcview, pkglog, kdiff3, CoyIM

    5 details in Everything

11. 0.9.64 Oct 22, 2020 · release notes

    Firejail 0.9.64 adds DHCP client support, fine-grained D-Bus sandboxingsandboxingRunning code inside a restricted environment that limits what it can access or change. The isolation reduces the impact of mistakes or untrusted code, depending on the sandbox's controls. via xdg-dbus-proxy, and --wrap option.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.64 https://github.com/netblue30/firejail.git
    # already have the repo? check out this version:
    $ git checkout 0.9.64

    └──▷ TRY IT
    Restore the previous seccomp filter behavior where blocked syscalls kill the process instead of returning EPERM.
    copy

    $ firejail --seccomp-error-action=kill firefox

    Enable fine-grained D-Bus sandboxing by excluding user and system bus access, which requires xdg-dbus-proxy installed.
    copy

    $ firejail --dbus-user=none --dbus-system=none firefox

    Pass an include file directly from the command line to customize the sandbox without editing profile files.
    copy

    $ firejail --include=/path/to/custom.inc firefox

    • --seccomp-error-action=kill or syscall:kill syntax allows overriding the new default EPERM blocking action for seccomp filters to restore previous kill behavior
    • New --wrap option replaces the deprecated --nowrap option in firemon
    • Fine-grained D-Bus sandboxing with xdg-dbus-proxy, using dbus-user none and dbus-system none instead of the now-deprecated nodbus flag
    • Added DHCP client support to allow sandboxing of DHCP clients
    • New profiles added: gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, muraster, gnome-passwordsafe, bibtex, gummi, latex, mupdf-x11-curl, pdflatex, tex, wpp, wpspdf, wps, et, multimc, mupdf-x11, gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool, desktopeditors, impressive, planmaker18, planmaker18free, presentations18, presentations18free, textmaker18, teams, textmaker18free, xournal, gnome-screenshot, ripperX, sound-juicer, com.github.dahenson.agenda, gnome-pomodoro, gnome-todo, x2goclient, iagno, kmplayer, penguin-command, frogatto, gnome-mines, gnome-nibbles, lightsoff, warmux, ts3client_runscript.sh, ferdi, abiword, four-in-a-row, gnome-mahjongg, gnome-robots, gnome-sudoku, gnome-taquin, gnome-tetravex, blobwars, gravity-beams-and-evaporating-stars, hyperrogue, jumpnbump-menu, jumpnbump, magicor, mindless, mirrormagic, mrrescue, scorched3d-wrapper, scorchwentbonkers, seahorse-adventures, wordwarvi, xbill, gnome-klotski, swell-foop, fdns, five-or-more, steam-runtime, nicotine, plv, mocp, apostrophe, quadrapassel, dino-im, hitori, bijiben, gnote, gnubik, ZeGrapher, xonotic-sdl-wrapper, gapplication, openarena_ded, element-desktop, cawbird, freetube, strawberry, jitsi-meet-desktop, homebank, mattermost-desktop, newsflash, com.gitlab.newsflash, sushi, xfce4-screenshooter, org.gnome.NautilusPreviewer, lyx, minitube, nuclear, mtpaint, minecraft-launcher, gnome-calendar, vmware, git-cola, otter-browser, kazam, menulibre, musictube, onboard, fractal, mirage, quaternion, spectral, man, psi, smuxi-frontend-gnome, balsa, kube, trojita, youtube, youtubemusic-nativefier, cola, dbus-send, notify-send, qrencode, ytmdesktop, twitch, xournalpp, chromium-freeworld, equalx

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The blocking action of seccomp filters now returns EPERM instead of killing the process; use --seccomp-error-action=kill or /etc/firejail/firejail.config to restore previous behavior
    • !nodbus is deprecated in favor of dbus-user none and dbus-system none and will be removed in a future version
12. 0.9.62 Dec 28, 2019 · release notes

    Firejail 0.9.62 adds file-copy-limit, debugger whitelisting, new conditions, and dozens of profiles

    • Adds file-copy-limit configuration key to /etc/firejail/firejail.config to restrict how much data a sandboxed process can write to disk.
    • Adds support for allow-debuggers in user profiles to permit debugging tools inside the sandbox.
    • Adds new conditional profile syntax: HAS_X11 and HAS_NET.
    • Adds signal mediation support within AppArmorAppArmorA Linux kernel security module, maintained as part of the kernel, that confines programs to a declared set of files, capabilities, and network access — letting cyber tools sandbox processes without writing custom kernel code. profiles.

    4 details in Everything

13. 0.9.60 May 26, 2019 · release notes

    Firejail 0.9.60 adds --private-cwd, extends --memory-deny-write-execute and brings back Centos 6 support.

    • Adds --private-cwd option to control working directory within jail
    • memory-deny-write-execute now also blocks memfd_creatememfd_createA Linux system call that creates an anonymous, file-descriptor-backed memory region that never touches disk, giving cyber tools a way to load and execute code entirely in RAM without leaving filesystem artifacts.

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Drops support for flatpak/snap packages
14. 0.9.58.2 Feb 8, 2019 · release notes

    Firejail 0.9.58.2 adds cgroup and name-change config flags and new profiles.

    • Adds cgroup flag in /etc/firejail/firejail.config file to control cgroup handling
    • Reworks the --name flag implementation
    • Adds klavaro profile
    • Adds vscodium profile

    4 details in Everything

15. 0.9.58 Jan 26, 2019 · release notes

    Firejail 0.9.58 adds --net.print, new profiles, profile parser enhancements, and GitLab CI integration.

    • Adds --net.print command to display network interface information within the sandbox.
    • Adds profile_name support in configuration files to allow dynamic profile resolution based on the executable name.
    • Enhances profile parser with conditional handling for HAS_APPIMAGE, HAS_NODBUS, and BROWSER_DISABLE_U2F environment variables.
    • Adds GitLab CI/CD integration for distribution-specific builds via .gitlab-ci.yml configuration.
    • Adds --disable-mnt flag rework to handle mount namespace disabling more robustly.

    +2 more show less

    • Adds explicit nonewprivs support to the join option, allowing sandboxed processes to drop privileges when joining an existing namespace.
    • Adds 10 new application profiles: QMediathekView, aria2c, Authenticator, checkbashisms, devilspie, devilspie2, easystroke, github-desktop, min.

    7 details in Everything

16. 0.9.56 Sep 18, 2018 · release notes

    Firejail 0.9.56 adds --private-cache, new MS Office/Tor profiles, and wireless/tap network support

    • Adds --private-cache to create an isolated private ~/.cache directory for the sandboxed application
    • Adds ms-excel, ms-office, ms-onenote, ms-outlook, ms-powerpoint, ms-skype, ms-word, and start-tor-browser.desktop to the set of new default application profiles
    • Enables use of --net=none even when networking is disabled at compile time or run time

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The CFG_CHROOT_DESKTOP configuration option has been removed
    • !Compile-time options --enable-network=restricted and --disable-bind have been removed
17. 0.9.54 May 16, 2018 · release notes

    New --noautopulse flag, seccomp disassembler, overlayfs sandbox profiles, and dozens of new application profiles.

    └──▷ USE IT
    Enable AppArmorAppArmorA Linux kernel security module, maintained as part of the kernel, that confines programs to a declared set of files, capabilities, and network access — letting cyber tools sandbox processes without writing custom kernel code. enforcement globally via configuration file.
    config copy

    apparmor yes

    • Adds --noautopulse CLI flag to disable automatic pulseaudio config symlink creation
    • Adds firejail --apparmor.print option to output the AppArmor policy for a sandbox
    • Adds firemon --apparmor option and adds apparmor yes/no flag to /etc/firejail/firejail.config to control AppArmor enforcement
    • Adds --seccomp.print option to use the new seccomp disassembler for inspecting system call filters
    • Enables whitelist, private-dev, and private-tmp support specifically for overlay and chroot sandboxes

    +2 more show less

    • Introduces firejail.users user access database at /etc/firejail/firejail.users
    • Adds new sandbox profiles for: basilisk, Tor Browser language packs, PlayOnLinux, sylpheed, discord-canary, pycharm-community, pycharm-professional, pdfchain, tilp, vivaldi-snapshot, bitcoin-qt, kaffeine, falkon, gnome-builder, asunder, VS Code, gnome-recipes, akonadi_controle, evince-previewer, evince-thumbnailer, blender-2.8, thunderbird-beta, ncdu, gnome-logs, gcloud, musixmatch, gunzip, bunzip2, enchant-lsmod, enchant-lsmod-2, enchant, enchant-2, Discord, acat, adiff, als, apack, arepack, aunpack, ppsspp, scallion, clion, baloo_filemetadata_temp_extractor, AnyDesk, webstorm, xmind, qmmp, sayonara

    7 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The --force, --csh, --zsh, --debug-check-filename, --git-install, and --git-uninstall CLI flags have been removed
    • !Support for private-bin, private-lib and shell none has been disabled while running AppImage archives
    • !Restrictions for /proc, /sys and /run/user directories are moved from AppArmor profile into firejail executable
18. 0.9.52 Dec 7, 2017 · release notes

    Firejail 0.9.52 adds profile builder, netfilter output, timeout/rlimits, private-lib for GTKGTKA cross-platform widget toolkit maintained by the GNOME project for building graphical user interfaces in C, with bindings for many languages, giving cyber tools a native desktop UI without writing platform-specific rendering code./Qt, systemd-resolved support, and numerous new profiles.

    • Adds --build subcommand to the profile build tool
    • Adds --netfilter.print and --netfilter6.print flags for netfilter template support output
    • Adds --writable-run-user flag
    • Adds --rlimit-as flag for address space limits
    • Adds --rlimit-cpu flag for CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. time limits

    +6 more show less

    • Adds --timeout flag for execution timeout
    • Adds --debug-private-lib flag to debug private library loading
    • Adds GTK2, GTK3 and Qt4 support in private-lib feature
    • Adds systemd-resolved integration via D-Bus activation disable in firecfg
    • Enables globbing for --private-bin argument
    • Enables /etc and /usr/share whitelisting in apparmor profiles

    11 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !--allow-private-blacklists flag was deprecated; blacklisting, read-only, read-write, tmpfs and noexec are now allowed in private home directories by default
    • !remount-proc-sys config key was removed from firejail.config
    • !follow-symlink-private-bin config key was removed from firejail.config
    • !--profile-path flag was deprecated
19. 0.9.38.12 Nov 11, 2017 · release notes

    Adds quiet support in profile files for silent execution.

20. 0.9.50 Sep 7, 2017 · release notes

    Firejail 0.9.50 adds per-profile isolation flags, seccomp groups, and profiles for many apps

    • Adds --disable-mnt to disable /mnt in a per-profile sandbox
    • Adds --xephyr-screen to set the X11 Xephyr screen size
    • Adds --private-lib to provide a private /lib directory
    • Adds --nodvd to disable CDROM/DVD drive access
    • Adds --notv to disable DVB devices

    +6 more show less

    • Adds --profile.print command to print profile information
    • Adds --memory-deny-write-execute seccomp feature
    • Adds seccomp post-exec support
    • Adds --seccomp.block_secondary to block secondary architecture
    • Adds seccomp syscall groups support
    • Adds new profiles for curl, mplayer2, SMPlayer, Calibre, ebook-viewer, KWrite, Geary, Liferea, peek, silentarmy, IntelliJ IDEA, Android Studio, electron, riot-web, Extreme Tux Racer, Frozen Bubble, Open Invaders, Pingus, Simutrans, SuperTux, telegram-desktop, arm, rambox, apktool, baobab, dex2jar, gitg, hashcat, obs, picard, remmina, sdat2img, soundconverter, truecraft, gnome-twitch, tuxguitar, musescore, neverball, sqlitebrowse, Yandex Browser, minetest

    11 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !--output flag split into --output and --output-stderr
21. 0.9.48 Jun 12, 2017 · release notes

    Firejail 0.9.48 adds --novideo flag, AppArmorAppArmorA Linux kernel security module, maintained as part of the kernel, that confines programs to a declared set of files, capabilities, and network access — letting cyber tools sandbox processes without writing custom kernel code. warning, globals.local config, overlayfs profiles, and new app support

    • Adds the --novideo CLI flag to disable video access in sandboxes
    • Adds /etc/firejail/globals.local config file for global customizations
    • Enables profile support in overlayfs mode
    • Drops discretionary access control capabilities for root sandboxes
    • Prints a warning if the AppArmor sandbox fails to load the profile instead of failing silently

    +1 more show less

    • Adds new profiles for vym, darktable, Waterfox, digiKam, Catfish, and HandBrake

    6 details in Everything

22. 0.9.46 May 14, 2017 · release notes

    Firejail 0.9.46 adds private mount points for /opt and /srv, new CLI flags, config keys, profiles, and X server sandboxingsandboxingRunning code inside a restricted environment that limits what it can access or change. The isolation reduces the impact of mistakes or untrusted code, depending on the sandbox's controls..

    • Adds --private-opt and profile support to isolate the /opt directory
    • Adds --private-srv and profile support to isolate the /srv directory
    • Adds --machine-id and profile support to spoof the machine identifier
    • Adds --allow-private-blacklist and profile support to use blacklists inside private directories
    • Adds --hosts-file and profile support for a user-defined /etc/hosts file

    +19 more show less

    • Adds --writable-var-log and profile support for the real /var/log directory
    • Adds config support for terminal prompts via the prompt setting in /etc/firejail/firejail.config
    • Adds AppImage type 2 support and command line argument passing
    • Allows non-seccomp setup for OverlayFS sandboxes
    • Includes Python scripts for handling sandboxes
    • Allows local customization via .local files under /etc/firejail
    • Adds follow-symlink-as-user runtime config option in /etc/firejail/firejail.config
    • Adds follow-symlink-private-bin option in /etc/firejail/firejail.config
    • Adds --x11=xvfb support for Xvfb X11 server sandboxing
    • Allows /tmp directory usage in mkdir and mkfile profile commands
    • Implements --noblacklist command with profile support
    • Adds config support to disable access to /mnt and /media via the disable-mnt setting
    • Adds config support to disable join functionality via the join setting
    • Disables Go, Rust, and OpenSSL in the disable-devel.conf profile
    • Supports overlay, overlay-named, and overlay-tmpfs in profile files
    • Allows PulseAudio sockets in --private-tmp mode
    • Adds --fix-sound support in firecfg
    • Enables automatic X server sandboxing for --x11=xpra and --x11=xephyr
    • Supports Xpra extra params in the firejail config file

    24 details in Everything

23. 0.9.44.6 Jan 15, 2017 · release notes

    Firejail 0.9.44.6 adds .local file support for local customization and machine-id spoofing

    • Adds ability to use .local files under /etc/firejail for local customization
    • Adds machine-id spoofing capability

    2 details in Everything

24. 0.9.44 Oct 21, 2016 · release notes

    Firejail 0.9.44 adds --join-or-start, --put, --x11 controls, new profiles

    • --join-or-start flag enables starting or joining a sandbox in a single command.
    • --private-dev now includes Nvidia drivers automatically.
    • /srv directory is whitelisted by default when using --whitelist.
    • --noblacklist=/sys/fs allows user access to /sys/fs.
    • --veth-name flag assigns a name to the interface connected to the bridge.

    +7 more show less

    • --allusers feature makes all user home directories visible in the sandbox.
    • --put flag adds or moves files into the sandbox container.
    • --x11=block flag blocks X11 access.
    • --x11=xorg enables X11 security extension support.
    • --no3d flag disables 3D hardware acceleration.
    • New profiles added for qpdfview, mupdf, Luminance HDR, Synfig Studio, Gimp, Inkscape, feh, ranger, zathura, 7z, keepass, keepassx, claws-mail, mutt, git, emacs, vim, xpdf, VirtualBox, OpenShot, Flowblade, eog, and Evolution.
    • Restricted shell login now accepts wildcard patterns in the user name field.

    12 details in Everything

25. 0.9.42 Sep 8, 2016 · release notes

    Adds --appimage, --audit, overlay profiles, AppArmorAppArmorA Linux kernel security module, maintained as part of the kernel, that confines programs to a declared set of files, capabilities, and network access — letting cyber tools sandbox processes without writing custom kernel code./snap support, and new profile commands

    • Adds --appimage flag to sandbox AppImage applications.
    • Adds --apparmor flag to enable AppArmor confinement for sandboxes.
    • Adds /etc/firejail/snap.profile template for Ubuntu snap support.
    • Adds --audit flag to enable sandbox auditing capabilities.
    • Adds --overlay-clean flag to remove local overlay storage directory after session.

    +6 more show less

    • Adds --overlay-named feature to store and reuse overlay profiles.
    • Brings back --private-home option for private home directory isolation.
    • Adds firejail mkfile profile command.
    • Adds firejail quiet profile command.
    • Adds firejail x11 profile command.
    • Adds --allow-debuggers flag to allow debugging inside the sandbox with gdb and strace.

    11 details in Everything

26. 0.9.38.2 Aug 23, 2016 · release notes

    Firejail 0.9.38.2 adds --overlay-clean to remove local overlay storage after session ends

    • Adds --overlay-clean flag to clean local overlay storage directory after sandbox exit
    • Disables x32 ABI support to reduce attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources.

    2 details in Everything

27. 0.9.40 May 29, 2016 · release notes

    Firejail 0.9.40 adds network/profile CLI flags, runtime config, firecfg utility, and dozens of new app profiles.

    └──▷ USE IT
    Use the new firecfg utility to automatically integrate applications into the sandbox environment.
    shell copy

    firecfg

    • --nice option added for setting process priority
    • --x11, --x11=xpra, and --x11=xephyr options added for X11 forwarding support
    • --cpu.print option added for CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. profiling output
    • --ls and --get filetransfer options added for container file operations
    • --writable-etc and --writable-var options added to allow write access to /etc and /var

    +17 more show less

    • --read-only option added to mount root filesystem read-only
    • Profile commands: mkdir, ipc-namespace, and nosound added
    • Network profile commands: net, ip, defaultgw, ip6, mac, mtu, and iprange added
    • --output option now redirects stderr in addition to stdout
    • Compile-time option added to restrict --net= binding to root only
    • Runtime config support via firejail-config man page
    • firecfg utility added for automatic application integration
    • New profiles: lxterminal, Epiphany, cherrytree, Polari, Vivaldi, Atril
    • New profiles: qutebrowser, SlimJet, Battle for Wesnoth, Hedgewars
    • New profiles: qTox, OpenSSH client, OpenBox, Dillo, cmus, dnsmasq
    • New profiles: PaleMoon, Icedove, abrowser, 0ad, netsurf, Warzone2100
    • New profiles: okular, gwenview, Google-Play-Music-Desktop-Player
    • New profiles: Aweather, Stellarium, gpredict, quiterss, cyberfox
    • New profile: generic Ubuntu snap application
    • New profiles: xplayer, xreader, xviewer, mcabber, Psi+, Corebird, Konversation
    • New profiles: Brave, Gitter
    • generic.profile renamed to default.profile

    22 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !generic.profile is now named default.profile
28. 0.9.38 Feb 2, 2016 · release notes

    Firejail 0.9.38 adds IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. support, new join flags, --user command, and several application profiles.

    • Adds --ip6 and --netfilter6 flags for IPv6 networking support
    • Adds --join-network and --join-filesystem subcommands to --join for granular namespace sharing
    • Adds --user command option
    • Adds --private-tmp option
    • Adds application profiles for KMail, Seamonkey, Telegram, Mathematica, uGet, and mupen64plus

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The --private-home feature is deprecated
29. 0.9.36 Dec 27, 2015 · release notes

    New profiles for Chrome/Opera variants, --noblacklist/--profile-path flags, and new network filters.

    • Adds --noblacklist flag to skip default blacklist loading
    • Adds --profile-path <path> option to specify custom profile directory
    • Adds /etc/firejail/nolocal.net and /etc/firejail/webserver.net network filter files
    • Adds unbound, dnscrypt-proxy, BitlBee, HexChat, WeeChat, parole, rtorrent, google-chrome-stable, google-chrome-beta, google-chrome-unstable, and opera-beta profiles

    4 details in Everything

30. 0.9.34 Nov 7, 2015 · release notes

    Firejail 0.9.34 adds --ignore and --protocol flags with new application profiles

    • --ignore flag added to ignore specific configuration settings during sandboxingsandboxingRunning code inside a restricted environment that limits what it can access or change. The isolation reduces the impact of mistakes or untrusted code, depending on the sandbox's controls.
    • --protocol flag added to restrict network protocols (e.g., IPv4/IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only.) for the sandboxed process
    • New Google Chrome profile included for easier sandboxing of Chrome browsers
    • New Steam, Skype, Wine and Conkeror profiles included

    4 details in Everything

31. 0.9.32 Oct 21, 2015 · release notes

    Firejail 0.9.32 adds network interface filtering (interface, mtu), private binary isolation, noise suppression, hostname spoofing, and seccomp errno support

    • Adds --interface CLI argument to filter network traffic by physical interface
    • Adds --mtu CLI argument to set the Maximum Transmission Unit for the sandboxed interface
    • Adds --private-bin CLI argument to bind-mount specific binaries from a private directory
    • Adds --nosound CLI argument to disable audio access within the sandbox
    • Adds --hostname CLI argument to spoof the hostname inside the sandbox

    +2 more show less

    • Adds --quiet CLI argument to suppress standard output during execution
    • Enables seccomp errno return codes for blocked system calls via seccomp filter rules

    7 details in Everything

32. 0.9.30 Sep 14, 2015 · release notes

    Firejail 0.9.30 adds --private-etc, --env, --whitelist, and overlay persistence while renaming --private-keep to --private-home.

    • --private-etc option added for customizing private /etc directory contents
    • --env option added for setting environment variables in the sandbox
    • --whitelist option added to allow specific paths to remain accessible
    • ${HOME} token support in profile include directives
    • --private-home option replaces deprecated --private.keep for preserving home directories

    +7 more show less

    • Support for tildes and blanks in blacklist option syntax
    • net none command supported in profile files to disable network access
    • /etc/firejail/generic.profile used by default for user sessions
    • /etc/firejail/server.profile used by default for root sessions
    • Build system supports make install-strip (new target) and make install renamed
    • --overlay-tmpfs option added for temporary overlay filesystems
    • Persistence feature enabled for the --overlay option

    12 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !--private.keep is renamed to --private-home
33. 0.9.28 Aug 1, 2015 · release notes

    Adds --scan, --mac, --iprange, and --bandwidth network flags to Firejail 0.9.28

    • Adds --scan option for network scanning capabilities
    • Adds --mac option to specify interface MAC addressMAC addressA hardware-address identifier used on a local network, such as Ethernet or Wi-Fi. It identifies a network interface for delivery on that link, rather than routing across the internet. support
    • Adds --iprange option to define IP address range
    • Adds --bandwidth option to enable traffic shaping
    • Adds /etc/firejail/disable-common.inc file to hold common directory blacklists

    +1 more show less

    • Adds support for the noroot option in profile files

    6 details in Everything

34. 0.9.26 Apr 30, 2015 · release notes

    Firejail 0.9.26 adds private.dev directory, private.keep whitelisting, and user namespace support via noroot.

    • Adds --private-dev option to create a private /dev directory inside the sandbox
    • Adds --private.keep option to whitelist specific files or directories from the host home into the new private environment
    • Adds --noroot option and underlying user namespaces support to run sandboxes as unprivileged users
    • Adds default profiles for Deluge and qBittorrent

    4 details in Everything

35. 0.9.24 Apr 5, 2015 · release notes

    Firejail 0.9.24 adds seccomp filter whitelisting/blacklisting, --shell=none support and netfilter/DNS profile settings

    • Adds --whitelist and --blacklist options for seccomp filters to control allowed or denied system calls
    • Adds --shell=none flag to launch sandboxed processes without an interactive shell
    • Adds support for netfilter directives in profile files to configure network filtering rules
    • Adds support for dns server configuration in profile files
    • Adds --dns.print option to print the configured DNS servers for a sandboxed process

    5 details in Everything

36. 0.9.22 Mar 9, 2015 · release notes

    Firejail 0.9.22 adds --ip, --dns, --netstats flags, macvlan support, and seccomp blacklist updates

    • --ip=none replaces the deprecated --noip option for disabling network access
    • --dns flag allows specifying a custom DNS server for the sandboxed environment
    • --netstats monitor network statistics in real-time during sandbox execution
    • macvlan support added to --net option for advanced network interface configurations
    • New seccomp blacklist entries: process_vm_readv, process_vm_writev, and mknod are now blocked by default

    +1 more show less

    • Custom Linux capabilities can be controlled via new blacklist/whitelist filters using configuration keys

    6 details in Everything

37. 0.9.20 Feb 2, 2015 · release notes

    Firejail 0.9.20 adds CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. affinity, cgroups support, seccomp empty attribute, and browser profiles.

    • --cpu flag allows setting CPU affinity for sandboxes
    • --cgroup option enables Linux control groups support in sandboxes
    • "empty" attribute to the seccomp command removes the default syscall list
    • --nogroups option disables supplementary groups for regular users

    4 details in Everything

38. 0.9.18 Dec 25, 2014 · release notes

    Firejail 0.9.18 adds tracing for more UID/GID syscalls and new profiles

    • Introduces pre-built Firejail profiles for transmission-gtk and transmission-qt desktop applications.

    1 detail in Everything

39. 0.9.16 Nov 4, 2014 · release notes

    Firejail 0.9.16 adds configurable home/shell defaults and new profile keywords (include, caps, seccomp, private)

    • Adds private-home directive to profile files for a configurable private home directory
    • Adds default-user-shell directive to profile files for a configurable default user shell
    • Adds include, caps, seccomp, and private keywords to profile files for fine-grained configuration
    • Enables Linux capabilities and seccomp filters by default for Firefox, Midori, Evince, and Dropbox profiles
    • Adds built-in Dropbox profile file support

    5 details in Everything

40. 0.9.14 Oct 15, 2014 · release notes

    Adds auto seccomp in chroot, user-defined seccomp blacklists, syscall trace, new sandbox options, and firemon ARPARPA network protocol that maps IP addresses to MAC addresses on a local Ethernet segment, letting tools resolve layer-3 targets to layer-2 hardware addresses for packet crafting or host discovery./route/interface info.

    • Linux capabilities and seccomp filters are automatically enabled in chroot mode (--chroot option) if the sandbox is started as regular user
    • Added support for user defined seccomp blacklists
    • Added syscall trace support
    • Added --tmpfs option
    • Added --balcklist option

    +6 more show less

    • Added --read-only option
    • Added --bind option
    • --overlay option was reactivated
    • Added firemon support to print the ARP table for each sandbox
    • Added firemon support to print the route table for each sandbox
    • Added firemon support to print interface information for each sandbox

    11 details in Everything

41. 0.9.10 Aug 28, 2014 · release notes

    Firejail 0.9.10 adds process tree visibility (--tree), process joining (--join), and a Chromium profile

    • Adds --tree option in firejail and firemon to display the process hierarchy of sandboxed applications.
    • Adds --join=name option to attach to an existing sandbox session by name.
    • Adds --shutdown option to terminate a sandboxed application from the outside.
    • Adds a built-in Chromium web browser profile for immediate use with the Chromium/Chrome browsers.
    • Disables access to /proc/kcore, /proc/kallsyms, /dev/port, and /boot in the default baseline profile.

    5 details in Everything

42. 0.9.8 Jul 24, 2014 · release notes

    Firejail 0.9.8 adds seccomp filter support, --top to firejail/firemon, nowrap mode to --list, and pid support to firemon.

    • Adds seccomp filter support for process sandboxingsandboxingRunning code inside a restricted environment that limits what it can access or change. The isolation reduces the impact of mistakes or untrusted code, depending on the sandbox's controls.
    • Adds --top option in both firejail and firemon commands
    • Implements nowrap mode for the firejail --list command option

    3 details in Everything

43. 0.9.6 Jun 7, 2014 · release notes

    Firejail 0.9.6 adds tmpfs mounting on /var/log, csh/zsh default shell support, and profiles for lighttpd, isc-dhcp-server, apache2, nginx, snmpd

    • Adds --tmpfs=/var/log mount option to overlay a temporary filesystem on /var/log, required by several server programs
    • Adds built-in profile support for lighttpd, isc-dhcp-server, apache2, nginx, and snmpd

    2 details in Everything

44. 0.9.4 May 4, 2014 · release notes

    Firejail 0.9.4 adds evince and midori profiles

    • Adds evince profile for PDF viewing sandboxingsandboxingRunning code inside a restricted environment that limits what it can access or change. The isolation reduces the impact of mistakes or untrusted code, depending on the sandbox's controls..
    • Adds midori profile for web browsing sandboxing.

    2 details in Everything

45. 0.9.2 Apr 25, 2014 · release notes

    Firejail 0.9.2 adds --defaultgw, --noip, syslog, and new profile commands

    • Adds --defaultgw CLI option to specify a default gateway for the sandboxed network namespace.
    • Adds --noip support for sandboxingsandboxingRunning code inside a restricted environment that limits what it can access or change. The isolation reduces the impact of mistakes or untrusted code, depending on the sandbox's controls. setups that rely on DHCP without an initial IP address.
    • Adds syslog support for logging sandbox events and activities.
    • Adds tmpfs and read-only commands for use within Firejail profile files.

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The --ip option now checks the IP address via ARPARPA network protocol that maps IP addresses to MAC addresses on a local Ethernet segment, letting tools resolve layer-3 targets to layer-2 hardware addresses for packet crafting or host discovery. and exits if the address is already present, which may break sandboxes assigned to occupied IPs.