Post #3845788
2026-07-16 00:12 UTC
Thank you for this information. Would it be best to run firejail in a limited user?
Replies (1)
-
@zazarpro@lemmy.ml 2026-07-16 19:46
Yes, however, it won’t prevent the process launching as root because firejail is setuid. This means that the person executing the file transitions into the privileges of the owner of the file, in this case, root. Since this root process remains in the background it can theoretically be exploited by the sandboxed process that firejail spawns. The odds of this happening to someone who isn’t getting targeted are very very low so using firejail is still alright, but you should consider a non-setuid solution like bubblewrap or just a VM.