https://cybertoolchain.io/tools/firejail New releases and features in Firejail, tracked by The Cyber Toolchain. en Mon, 02 Nov 2026 14:30:53 GMT https://github.com/netblue30/firejail/releases/tag/0.9.82 https://github.com/netblue30/firejail/releases/tag/0.9.82 Mon, 02 Nov 2026 14:30:53 GMT Firejail adds `${PROJECTS}`, `${PUBLICSHARE}`, and `${TEMPLATES}` XDG macros, subpath support in XDG macros, `syscall:log` in seccomp lists, and a new `@program-keep` syscall⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Add `${PROJECTS}`, `${PUBLICSHARE}`, and `${TEMPLATES}` macros to profile files for referencing XDG user directories.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Allow subpaths in XDG macros in profile files, so paths like `${DOCUMENTS}/reports` are now valid. • Implement `syscall:log` in seccomp lists to log rather than block a syscall, enabling audit-style profiling. • Add the `profstats` tool's `--include` command-line option to filter profile statistics. • Add a new `@program-keep` syscall group for seccomp allowlists. • Add `llm-agent-common.profile` as a shared base profile for LLM agent applications. • Add sandbox profiles for gemini, opencode, pi, ephoto, tldr, claude, tasks-org, ChiPass, and maki. Breaking changes: • `--x11=xpra` support is removed; profiles or scripts using it will error. • `--x11=xephyr` is removed as a direct option; Xephyr is now used automatically by `--x11`. • `--x11=xorg` and `--x11=xvfb` are disabled in the default build; re-enabling requires `./configure --enable-x11-legacy`. • `--ip=dhcp` is temporarily disabled; sandboxes relying on DHCP assignment will not start. • `--bandwidth=` is removed; any profile or script using it will error. • `--tracelog` and `--blacklist-nolog` are removed; profiles or scripts using them will error. • `--private-home` is removed; profiles or scripts using it will error. • `private-lib` profile feature is removed; profiles using it will error. • SSH restricted shell feature is removed. • `firecfg --guide` is removed; the guidance is now in `man firejail`. • `./configure --enable-busybox-workaround` and `./configure --disable-sandbox-check` options are removed. • `--chroot=` is disabled in the default build; re-enabling requires `./configure --enable-chroot`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firejail https://github.com/netblue30/firejail/releases/tag/0.9.80 https://github.com/netblue30/firejail/releases/tag/0.9.80 Sat, 14 Mar 2026 12:41:33 GMT Firejail 0.9.80 adds PID 1 hiding, hostname randomization, and a new --debug-syscall-groups command. • Adds `--unhide-pid1` command to optionally expose PID 1 inside the sandbox, which is now hidden by default. • Adds `--hostname-randomize` command and profile option to opt into randomized sandbox hostnames (no longer the default). • Adds `--debug-syscall-groups` command for inspecting resolved syscall groups during seccomp policy development. • Adds AppArmor profiles for the `--nettrace` command, enabling confined network tracing. • Makes Xephyr the default backend for `--x11`, replacing Xpra. • Adds new application profiles: fragments, srb2, zen/zen-bin/zen-browser, and halloy IRC client. • Supports Deno JavaScript engine and browser cookies in the yt-dlp profile. • Requires a full or relative file path for `--profile=FILE` — using a bare filename is no longer accepted for security reasons. Breaking changes: • The `--profile=FILE` option now requires a full or relative path; passing a bare filename will be rejected. • PID 1 is now hidden inside the sandbox by default; use `--unhide-pid1` to restore previous behavior. • Hostname randomization is no longer active by default; use `--hostname-randomize` to re-enable it. • Xephyr is now the default for `--x11`, replacing Xpra. • The `./configure --disable-man` build option has been removed. • The `./configure --disable-usertmpfs` build option has been removed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firejail https://github.com/netblue30/firejail/releases/tag/0.9.78 https://github.com/netblue30/firejail/releases/tag/0.9.78 Wed, 21 Jan 2026 00:51:24 GMT Firejail 0.9.78 adds argument/environment limits, Xephyr params, a bwrap compatibility shim, and new app profiles. • Adds `arg-max-count` and `arg-max-len` settings to `firejail.config` to cap the number and length of arguments passed to sandboxed programs. • Adds `env-max-count` and `env-max-len` settings to `firejail.config` to cap the number and length of environment variables in the sandbox. • New `--xephyr-extra-params=` command allows passing additional parameters to Xephyr when running sandboxed X11 sessions. • New `--allow-bwrap` command forces use of the real bubblewrap (bwrap) binary; by default, Firejail now substitutes a dummy `fbwrap` program to work around glycin 2.0.0/gdk-pixbuf2 compatibility issues. • Adds new sandbox profiles for: ne (text editor), trivalent, openra, gzdoom/lzdoom/uzdoom, and quakespasm. • rlimit values now accept uppercase suffixes (e.g., `K`, `M`, `G`) for human-readable resource limit configuration. Breaking changes: • The `--disable-globalcfg` configure option has been removed; any build scripts using it will fail. • Overlayfs support and the `--overlay` commands have been removed; profiles or scripts relying on `--overlay` will break. • The Intrusion Detection System (IDS) / `fids` component has been removed; any workflows invoking `fids` will break. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firejail https://github.com/netblue30/firejail/releases/tag/0.9.76 https://github.com/netblue30/firejail/releases/tag/0.9.76 Wed, 30 Jul 2025 11:19:43 GMT Firejail 0.9.76 adds a `warn` profile command, glob support for /dev paths, and renames `notpm` to `keep-dev-tpm`. • Adds `warn` profile command to emit warnings during sandbox setup without aborting. • Supports globbing in hardcoded numbered `/dev` paths, allowing flexible device matching in profiles. • Introduces non-blocking `flock` calls, reducing sandbox startup contention. • Replaces the `notpm` command with `keep-dev-tpm`, which retains TPM-related devices (`/dev/tpm*`, `/dev/tpmrm*`, `/dev/tcm*`, `/dev/tcmrm*`) and the `tss` group when used. • Adds new sandbox profile for Ansel photo editing application. Breaking changes: • The `notpm` command is removed and replaced by `keep-dev-tpm`; profiles using `notpm` must be updated to use `keep-dev-tpm` instead. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firejail https://github.com/netblue30/firejail/releases/tag/0.9.74 https://github.com/netblue30/firejail/releases/tag/0.9.74 Tue, 25 Mar 2025 13:49:27 GMT Firejail 0.9.74 adds Landlock support, QUIC/HTTP3 nettrace, random sandbox hostnames, IPv6 net.print, and aarch64 syscalls. • Adds QUIC (HTTP/3) protocol support in `--nettrace` for visibility into modern encrypted traffic. • Adds stats collection support to `--nettrace`. • Adds IPv6 support for the `--net.print` option. • Assigns a random hostname to each sandbox by default unless overridden with `--hostname`. • Adds new `keep-shell-rc` command and option to preserve shell RC files inside the sandbox. • Adds seccomp filters for `--restrict-namespaces` to harden namespace restriction. • Adds `doas` support in `firecfg` and `jailcheck` alongside existing `sudo` support. • Adds `firecfg.d` drop-in directory and new `ignore` command to `firecfg` for modular configuration overrides. • Expands simple macro expansion to `--chroot=`, `--netfilter=`, `--netfilter6=`, and `--trace=` options. • Adds support for `comm`, `coredump`, and `prctl` process events in `firemon`. • Adds `notpm` command and keeps TPM devices accessible in `private-dev`. • Adds `keep-dev-ntsync` command and blocks `/dev/ntsync` by default. • Adds aarch64 syscall definitions for seccomp filtering on ARM64. • Adds `--disable-sandbox-check` configure flag to skip sandbox capability checks at build time. • Adds `private-etc` groups support and improves `/etc/resolv.conf` handling in `private-etc`. • Adds NixOS support for `tc` traffic shaping in `fshaper.sh`. Breaking changes: • The `--interface` option is removed from `firemon`; use `firejail --net.print=` instead. • Support for LTS and firetunnel is removed. • `private-lib` is now disabled by default at configure time; re-enable with `--enable-private-lib`. • Sandbox names (`--name=`) and hostnames (`--hostname=`) may no longer consist entirely of digits, and are now restricted to mostly ASCII letters and digits. • Firejail no longer forwards its own `--` double-dash to the shell. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firejail https://github.com/netblue30/firejail/releases/tag/0.9.72 https://github.com/netblue30/firejail/releases/tag/0.9.72 Mon, 16 Jan 2023 16:02:14 GMT Firejail 0.9.72 adds --restrict-namespaces, --apparmor=, network trace commands, and custom profile profiles • Adds `--restrict-namespaces` flag to restrict the creation of Linux namespaces via seccomp filter • Adds `--apparmor=` flag to support custom AppArmor profiles • Adds `--dnstrace`, `--icmptrace`, and `--snitrace` commands for network tracing • Adds `restrict-namespaces` support in profile files Breaking changes: • The `--cgroup=` command is removed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firejail https://github.com/netblue30/firejail/releases/tag/0.9.70 https://github.com/netblue30/firejail/releases/tag/0.9.70 Thu, 09 Jun 2022 15:14:25 GMT Adds --tab for shell tab completion, --oom for OOM killer control, firecfg --guide UI, and avahi .local resolution support • Add `--tab` flag to enable shell tab completion within jailed environments • Add `--oom` flag to manage kernel OutOfMemory-killer behavior for the jail process • Add `firecfg --guide` subcommand to provide guided user configuration interface • Enable resolution of `.local` hostnames using `avahi-daemon` in the AppArmor profile Breaking changes: • --ids feature must now be explicitly enabled at compile time (previously it may have been default) • --nettrace option is now restricted to root user only Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firejail https://github.com/netblue30/firejail/releases/tag/0.9.68 https://github.com/netblue30/firejail/releases/tag/0.9.68 Sun, 06 Feb 2022 13:45:56 GMT Adds intrusion detection (ids), network monitoring/locking, deterministic shutdown, and several new subcommands in Firejail 0.9.68 • Adds `--ids-init` and `--ids-check` flags for the intrusion detection system subsystem • Adds `--nettrace` flag as a network monitor feature • Adds `--netlock` flag as a network locker feature • Adds `--deterministic-exit-code` and `--deterministic-shutdown` flags for deterministic shutdown behavior • Adds `noprinters` subcommand • Adds `--whitelist-ro` profile command flag • Adds `firecfg.config` to `/etc/firejail/` for configuration management Breaking changes: • The `--disable-whitelist` flag is removed at compile time; the feature is no longer available. • The `whitelist=yes/no` option is removed from `/etc/firejail/firejail.config`; existing configs using this key will likely fail validation or be ignored. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firejail