• 0 Posts
  • 2 Comments
Joined 5 months ago
Cake day: February 10th, 2026

  • Yes, however, it won’t prevent the process launching as root because firejail is setuid. This means that the person executing the file transitions into the privileges of the owner of the file, in this case, root. Since this root process remains in the background it can theoretically be exploited by the sandboxed process that firejail spawns.

    The odds of this happening to someone who isn’t getting targeted are very very low so using firejail is still alright, but you should consider a non-setuid solution like bubblewrap or just a VM.