{"id":13399999,"url":"https://github.com/netblue30/firejail","last_synced_at":"2025-05-12T15:29:16.271Z","repository":{"id":36115847,"uuid":"40418146","full_name":"netblue30/firejail","owner":"netblue30","description":"Linux namespaces and seccomp-bpf sandbox","archived":false,"fork":false,"pushed_at":"2025-05-02T07:56:20.000Z","size":22891,"stargazers_count":6225,"open_issues_count":465,"forks_count":593,"subscribers_count":98,"default_branch":"master","last_synced_at":"2025-05-02T08:45:53.766Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://firejail.wordpress.com","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/netblue30.png","metadata":{"files":{"readme":"README","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2015-08-08T22:25:44.000Z","updated_at":"2025-05-02T07:56:17.000Z","dependencies_parsed_at":"2023-10-16T04:23:55.216Z","dependency_job_id":"c5589ae6-e7a1-4e4d-abfd-7d4cf51ee179","html_url":"https://github.com/netblue30/firejail","commit_stats":null,"previous_names":[],"tags_count":63,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netblue30%2Ffirejail","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netblue30%2Ffirejail/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netblue30%2Ffirejail/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/netblue30%2Ffirejail/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/netblue30","download_url":"https://codeload.github.com/netblue30/firejail/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":253765445,"owners_count":21960730,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-07-30T19:00:46.306Z","updated_at":"2025-05-12T15:29:16.256Z","avatar_url":"https://github.com/netblue30.png","language":"C","readme":"Firejail is a SUID sandbox program that reduces the risk of security breaches\nby restricting the running environment of untrusted applications using Linux\nnamespaces and seccomp-bpf.\n\nIt includes sandbox profiles for many programs, including Iceweasel/Mozilla\nFirefox, Chromium, Midori, Opera, Evince, Transmission, VLC, Audacious,\nClementine, Rhythmbox, Totem, Deluge, qBittorrent, DeaDBeeF, Dropbox, Empathy,\nFileZilla, IceCat, Thunderbird/Icedove, Pidgin, Quassel, and XChat.\n\nFirejail also expands the restricted shell facility found in bash by adding\nLinux namespace support.  It supports sandboxing specific users upon login.\n\nDownload: https://sourceforge.net/projects/firejail/files/\nBuild and install: ./configure \u0026\u0026 make \u0026\u0026 sudo make install\nDocumentation and support: https://firejail.wordpress.com/\nVideo Channel: https://www.brighteon.com/channels/netblue30\nBackup Video Channel: https://www.bitchute.com/profile/JSBsA1aoQVfW/\nDevelopment: https://github.com/netblue30/firejail\nLicense: GPL v2\n\nPlease report all security vulnerabilities to:\n\n* \u003cnetblue30@protonmail.com\u003e\n\nCompile and install the mainline version from GitHub:\n\n    git clone https://github.com/netblue30/firejail.git\n    cd firejail\n    ./configure \u0026\u0026 make \u0026\u0026 sudo make install-strip\n\nOn Debian/Ubuntu you will need to install git and gcc.\n\nTo build with AppArmor support (which is usually used on Debian, Ubuntu,\nopenSUSE and derivatives), install the AppArmor development libraries and\npkg-config and use the `--enable-apparmor` ./configure option:\n\n    sudo apt-get install git build-essential libapparmor-dev pkg-config gawk\n\nTo build with SELinux support (which is usually used on Fedora, RHEL and\nderivatives), install libselinux1-dev (libselinux-devel on Fedora) and use the\n`--enable-selinux` ./configure option.\n\nWe build our release firejail.tar.xz and firejail.deb packages using the\nfollowing commands:\n\n    make distclean \u0026\u0026 ./configure \u0026\u0026 make deb\n\nMaintainer:\n- netblue30 (netblue30@protonmail.com)\n\nCommitters:\n- chiraag-nataraj (https://github.com/chiraag-nataraj)\n- crass (https://github.com/crass)\n- ChrysoliteAzalea (https://github.com/ChrysoliteAzalea)\n- curiosityseeker (https://github.com/curiosityseeker)\n- glitsj16 (https://github.com/glitsj16)\n- Fred-Barclay (https://github.com/Fred-Barclay)\n- Kelvin M. Klann (https://github.com/kmk3)\n- Kristóf Marussy (https://github.com/kris7t)\n- Neo00001 (https://github.com/Neo00001)\n- pirate486743186 (https://github.com/pirate486743186)\n- Reiner Herrmann (https://github.com/reinerh - Debian/Ubuntu maintainer)\n- rusty-snake (https://github.com/rusty-snake)\n- smitsohu (https://github.com/smitsohu)\n- SkewedZeppelin (https://github.com/SkewedZeppelin)\n- startx2017 (https://github.com/startx2017)\n- Topi Miettinen (https://github.com/topimiettinen)\n- veloute (https://github.com/veloute)\n- Vincent43 (https://github.com/Vincent43)\n- netblue30 (netblue30@protonmail.com)\n\n---\n\nFirejail Authors (alphabetical order):\n\n0x7969 (https://github.com/0x7969)\n\t- fix wire-desktop.profile\n\t- add ferdi.profile\n0x9fff00 (https://github.com/0x9fff00)\n\t- add Colossal Order to steam.profile\n7twin (https://github.com/7twin_)\n\t- fix typos\n\t- fix flameshot raw screenshots\n1dnrr (https://github.com/1dnrr)\n\t- add pybitmessage profile\na1346054 (https://github.com/a1346054)\n\t- add missing final newlines in various files\n\t- Remove deprecated syntax and modernize shell test scripts\nÁdler Jonas Gross (https://github.com/adgross)\n\t- AppArmor fix\nAdrian L. Shaw (https://github.com/adrianlshaw)\n\t- add profanity profile\n\t- add barrirer profile\n\t- add profile for Beyond All Reason\n\t- RPCS3 profile\nAidan Gauland (https://github.com/aidalgol)\n\t- added electron, riot-web and npm profiles\n\t- whitelist Bohemia Interactive config dir for Steam\nAkhil Hans Maulloo (https://github.com/kouul)\n\t- xz profile\nAlbin Kauffmann (https://github.com/albinou)\n\t- Firefox and Chromium profile fixes\n\t- info to allow screen sharing in profiles\nAlexandre Provencio (https://github.com/aleprovencio)\n\t- fix qutebrowser not opening tabs\nAlex Leahu (https://github.com/alxjsn)\n\t- fix screen sharing configuration on Wayland\nAlexey Kuznetsov (kuznet@ms2.inr.ac.ru)\n\t- src/lib/libnetlink.c extracted from iproute2 software package\nAleksey Manevich (https://github.com/manevich)\n\t- several profile fixes\n\t- fix problem with relative path in storage_find function\n\t- fix build for systems without bash\n\t- fix double quotes/single quotes problem\n\t- big rework of argument processing subsystem\n\t- --join fixes\n\t- splitting up cmdline.c\n\t- Busybox support\n\t- X11 support rewrite\n\t- gether shell selection code in one place\n\t- fixed several TOCTOU security problems\n\t- added --fix option to firecfg utility\n\t- read_pid fix\n\t- added --x11=block options\n\t- x11 xpra, xphyr, none profile commands\n\t- added --join-or-start command\n\t- CVE-2016-7545\nAlexander Gerasiov (https://github.com/gerasiov)\n\t- read-only ~/.ssh/authorized_keys\n\t- profile updates\n\t- fcopy: Use lstat when copy directory\nAlexander Stein (https://github.com/ajstein)\n\t- added profile for qutebrowser\nalkim0 (https://github.com/alkim0)\n\t- warn when encountering EIO during remount\n\t- Add profile for chafa\namano-kenji  (https://github.com/amano-kenji)\n\t- fix private-etc in qutebrowser profile\n\t- refactor com.github.johnfactotum.Foliate profile\n\t- added foliate profile\n\t- added area2p profile\n\t- added buku profile\n\t- added monero-wallet-cli profile\n\t- added tremc profile\n\t- added nsxiv profile\n\t- added pyradio profile\n\t- added ncmpcpp profile\n\t- added hledger, hledger-ui profiles\n\t- anki profile fixes\nAmin Vakil (https://github.com/aminvakil)\n\t- whois profile fix\n\t- added profile for strawberry\n\t- w3m profile fix\n\t- disable seccomp in wireshark profile\nAmmon Smith (https://github.com/ammongit)\n\t- Add DBus filter rules specific to firefox-developer-edition\nAndreas Hunkeler (https://github.com/Karneades)\n\t- Add profile for official Linux Teams application\nAndrey Alekseenko (https://github.com/al42and)\n\t- fixing lintian warnings\n\t- fixed Skype profile\nAndrey Skvortsov (https://github.com/AndreySV)\n\t- added aarch64 syscalls\nandrew160 (https://github.com/andrew160)\n\t- profile and man pages fixes\nAndrew Branson (https://github.com/abranson)\n\t- 32bit ARM syscall table\nannoun (https://github.com/announ)\n\t- mpv and youtube-dl profile fixes\n\t- git profile fix\n\t- evince profile fix\nAntoine Catton (https://github.com/acatton)\n\t- add keep-shell-rc command and option\nAnton Shestakov (https://github.com/antonv6)\n\t- add whitelist items for uim\n\t- allow /etc/vulkan in steam profile\n\t- allow ~/.cache/wine in lutris and wine profile\n\t- support MangoHud in steam profile\nAntonio Russo (https://github.com/aerusso)\n\t- enumerate root directories in apparmor profile\n\t- fix join-or-start\n\t- wusc fixes\n\t- okular profile fixes\n\t- manpage fixes\naoand (https://github.com/aoand)\n\t- seccomp fix: allow numeric syscalls\nArne Welzel (https://github.com/awelzel)\n\t- ignore SIGTTOU during flush_stdin()\narchaon616 (https://github.com/archaon616)\n\t- steam.profile: allow Factorio, Zomboid\nAtrate (https://github.com/Atrate)\n\t- BetterDiscord support\nAustin Morton (https://github.com/apmorton)\n\t- deterministic-exit-code option\n\t- private-cwd options\nAustin S. Hemmelgarn (https://github.com/Ferroin)\n\t- unbound profile update\nAvi Lumelsky (https://github.com/avilum)\n\t- syscall.sh improvements\navallach2000 (https://github.com/avallach2000(\n\t- fix qbittorrent profile\n\t- support for changing appearance of the Qt6 apps with qt6ct\navoidr (https://github.com/avoidr)\n\t- whitelist fix\n\t- recently-used.xbel fix\n\t- added parole profile\n\t- blacklist ncat\n\t- hostname support in profile file\n\t- Google Chrome profile rework\n\t- added cmus profile\n\t- man page fixes\n\t- add net iface support in profile files\n\t- paths fix\n\t- lots of profile fixes\n\t- added mcabber profile\n\t- fixed mpv profile\n\t- various other fixes\nayham (https://github.com/ayham-1)\n\t- allow custom homedir support for gpgagent\nАзалия Смарагдова/ChrysoliteAzalea (https://github.com/ChrysoliteAzalea)\n\t- add support for custom AppArmor profiles (--apparmor=)\n\t- add Landlock support\nbackspac (https://github.com/backspac)\n\t- firecfg fixes\n\t- add steam-runtime alias\nBader Zaidan (https://github.com/BaderSZ)\n\t- Telegram profile\nBandie (https://github.com/Bandie)\n\t- fixed riot-desktop\nBarış Ekin Yıldırım (https://github.com/circuitshaker)\n\t- removing net none from code.profile\nBart Bakker (https://github.com/bjpbakker)\n\t- multimc5: fix exec of LWJGL libraries\nbbhtt (https://github.com/bbhtt)\n\t- improvements to balsa,fractal,gajim,trojita profiles\n\t- improvements to nheko, spectral, feh, links, lynx, smplayer profiles\n\t- added alacarte, com.github.bleakgrey.tootle, photoflare profiles\n\t- add profiles for MS Edge dev build for Linux and Librewolf\n\t- fixes to cheese, authenticator, liferea\n\t- add profile for straw-viewer\n\t- email clients whitelisting and fixes\nBenjamin Kampmann (https://github.com/ligthyear)\n\t- Forward exit code from child process\nBeautyYuYanli (https://github.com/BeautyYuYanli)\n\t- add linuxqq and qq profiles\nbitfreak25 (https://github.com/bitfreak25)\n\t- added PlayOnLinux profile\n\t- minetest profile fix\n\t- added sylpheed profile\nbn0785ac (https://github.com/bn0785ac)\n\t- fixed bnox, dnox profiles\n\t- support all tor-browser langpacks\n\t- chromium canary (inox-family) fixes\n\t- allow multithreading for cin and natron\n\t- fix dbus access for libreoffice on KDE\n\t- fix inox, add snox profile\nBogDan Vatra (https://github.com/bog-dan-ro)\n\t- zoom profile\nBrad Ackerman\n\t- blacklist Bitwarden config in disable-passwdmgr.inc\nbriaeros (https://github.com/briaeros)\n\t- fix command test in jail_prober.py\nbotherer (https://github.com/botherder)\n\t- add CoyIM profile\nBruno Nova (https://github.com/brunonova)\n\t- whitelist fix\n\t- bash arguments fix\nBundy01 (https://github.com/Bundy01)\n\t- fixup geary\n\t- add gradio profile\n\t- update virtualbox.profile\n\t- Quodlibet profile\n\t- update apparmor firejail-local for Brave + ipfs\nbymoz089 (https://github.com/bymoz089)\n\t- add timezone access to make libical functional\nBytesTuner (https://github.com/BytesTuner)\n\t- provided keepassxc profile\nCaleb McCombs (https://github.com/squatched)\n\t- Zoom profile fixes\ncaoliver (https://github.com/caoliver)\n\t- network system fixes\nCarlo Abelli (https://github.com/carloabelli)\n\t- fixed udiskie profile\n\t- Allow mbind syscall for GIMP\n\t- fixed simple-scan\nCase_Of (https://github.com/CaseOf)\n\t- added Seafile profile\nCat (https://github.com/ecat3)\n\t- prevent tmux connecting to an existing session\ncayday (https://github.com/caydey)\n\t- added ~/Private blacklist in disable-common.inc\n\t- added quiet to some CLI profiles\ncelenityy (https://github.com/celenityy)\n\t- Thunderbird profile fix\n\t- wget profile fix\nChristian Pinedo (https://github.com/chrpinedo)\n\t- added nicotine profile\n\t- allow python3 in totem profile\ncreideiki (https://github.com/creideiki)\n\t- make the sandbox process reap all children\n\t- tor browser profile fix\nchiraag-nataraj (https://github.com/chiraag-nataraj)\n\t- support for newer Xpra versions (2.1+)\n\t- added Viber, amule, ardour5, brackets, calligra, cin, fetchmail profiles\n\t- added freecad, google-earth, imagej, kdenlive, linphone, lmms profiles\n\t- added macrofusion, mpd, natron, ricochet, shotcut, tor-browser-en profiles\n\t- added tor, x-terminal-emulator, zart profiles\nChristian Stadelmann (https://github.com/genodeftest)\n\t- profile fixes\n\t- evolution profile fix\nClayton Williams (https://github.com/gosre)\n\t- addition of RLIMIT_AS\ncobratbq (https://github.com/cobratbq)\n\t- tor profile: add memory-deny-write-execute\n\t- torbrowser-launcher fixes\nCodeWithMa (https://github.com/CodeWithMa)\n\t- mpv.profile: add new XDG_STATE_HOME path\ncorecontingency (https://https://github.com/corecontingency)\n\t- tighten private-bin and etc for torbrowser-launcher.profile\n\t- added i2prouter profile\n\t- add several games to steam and disable-programs\ncrass (https://github.com/crass)\n\t- extract_command_name fixes\n\t- update appimage size calculation to newest code from libappimage\n\t- firejail should look for processes with names exactly named\ncroket (https://github.com/crocket)\n\t- fix librewolf profile\n\t- added profiles for imv, retroarch, and torbrowser\n\t- fix dino profile\n\t- fix wireshark profile\n\t- prevent emptty /usr/share in google-chrome profiles\ncubercsl (https://github.com/cubercsl)\n\t- add linuxqq and qq profiles\ncuriosity-seeker (https://github.com/curiosity-seeker - old)\ncuriosityseeker (https://github.com/curiosityseeker - new)\n\t- tightening unbound and dnscrypt-proxy profiles\n\t- correct and tighten QuiteRss profile\n\t- dnsmasq profile\n\t- okular and gwenview profiles\n\t- cherrytree profile fixes\n\t- added quiterss profile\n\t- added guayadeque profile\n\t- added VirtualBox.profile\n\t- various other profile fixes\n\t- added digiKam profile\n\t- write-protection for thumbnailer dir\n\t- added gramps, newsboat, freeoffice-planmaker profiles\n\t- added freeoffice-textmaker, freeoffice-presentations profiles\n\t- added cantata profile\n\t- updated keypassxc profile\n\t- added syscalls.sh, which determine the necessary syscalls for a program\n\t- fixed conky profile\n\t- thunderbird.profile: harden and enable the rules necessary to make\n\t  Firefox open links\nD357R0Y3R (https://github.com/D357R0Y3R)\n\t- added floorp to firejail.config\nda2x (https://github.com/da2x)\n\t- matched RPM license tag\nDaan Bakker (https://github.com/dbakker)\n\t- protect shell startup files\nDanil Semelenov (https://github.com/sgtpep)\n\t- blacklist the Electron Cash Wallet\n\t- blacklist s3cmd and s3fs configs\n\t- blacklist Ethereum, Monero wallets\n\t- blacklist Dash Core wallet\nDara Adib (https://github.com/daradib)\n\t- ssh profile fix\n\t- evince profile fix\n\t- linphone profile fix\nDario Pellegrini (https://github.com/dpellegr)\n\t- allowing links in netns\nDavid Fetter (https://github.com/davidfetter)\n\t- bump up copyright years\nDavid Thole (https://github.com/TheDarkTrumpet)\n\t- added profile for teams-for-linux\nDavide Beatrici (https://github.com/davidebeatrici)\n\t- steam.profile: correctly blacklist unneeded directories in user's home\n\t- minetest fixes\n\t- map /dev/input with \"--private-dev\", add \"--no-input\" option to disable it\n\t- whitelist /usr/share/TelegramDesktop in telegram.profile\n\t- allow access to ~/.cache/winetricks\nDavid Hyrule (https://github.com/Svaag)\n\t- remove nou2f in ssh profile\nDeelvesh Bunjun (https://github.com/DeelveshBunjun)\n\t- added xpdf profile\nDefaultUser (https://github.com/DefaultUser)\n\t- neochat: Allow netlink\nDenis Subbotin (https://github.com/mr-tron)\n\t- telegram.profile: allow ~/.local/share/telegram-desktop\nDenys Havrysh (https://github.com/vutny)\n\t- update SkypeForLinux profile for latest version\n\t- removed outdated Skype profile\ndewbasaur (https://github.com/dewbasaur)\n\t- block access to history files\n\t- Firefox PDF.js exploit (CVE-2015-4495) fixes\n\t- Steam profile\nDiGitHubCap (https://github.com/DiGitHubCap)\n\t- deluge profile fix\n\t- fix qt5ct colour schemes and QSS\nDieter Plaetinck (https://github.com/Dieterbe)\n\t- qutebrowser: update MPRIS name for qutebrowser-qt6\n\t- fix email-common.profile\n\t- fix claws-mail profile\nDisconnect3d (https://github.com/disconnect3d)\n\t- code cleanup\ndm9pZCAq (https://github.com/dm9pZCAq)\n\t- fix for compilation under musl\ndmfreemon (https://github.com/dmfreemon)\n\t- add sandbox name or name of private directory to the window title\n\t  when xpra is used\n\t- handle malloc() failures; use gnu_basename() instead of basenaem()\nDmitriy Chestnykh (https://github.com/chestnykh)\n\t- add ability to disable user profiles at compile time\n\t- lookup xauth in PATH\nDpeta (https://github.com/Dpeta)\n\t- add Chatterino profile\ndringsim (https://github.com/dringsim)\n\t- add ftplugin file (vim)\ndshmgh (https://github.com/dshmgh)\n\t- overlayfs fix for systems with /home mounted on a separate partition\nDuncan Overbruck (https://github.com/Duncaen)\n\t- musl libc fix\n\t- utmp fix\n\t- fix install for --disable-seccomp software configurations\nEduard Tolosa (https://github.com/Edu4rdSHL)\n\t- fixed and hardened qpdfview.profile\n\t- fixed gajim.profile\nEklektisk (https://github.com/Eklektisk)\n\t- update librewolf.profile: use new d-bus message bus\nemacsomancer (https://github.com/emacsomancer)\n\t- added profile for Conkeror browser\nEmil Gedda (https://github.com/EmilGedda)\n\t- fix multicast CIDR address in nolocal.net\neventyrer (https://github.com/eventyrer)\n\t- update gnome-mplayer.profile\nEthan R (https://github.com/AN3223)\n\t- add allow-perl.inc to w3m.profile\nFabian Würfl (https://github.com/BafDyce)\n\t- fixed race condition when creating a new directory\n\t- Liferea profile\nFelipe Barriga Richards (https://github.com/fbarriga)\n\t- --private-etc fix\nFelix Pehla (https://github.com/FelixPehla)\n\t- fix fractal profile\n\t- blacklist sway IPC socket globally\nfenuks (https://github.com/fenuks)\n\t- fix sound in games using FMOD\n\t- allow /opt/tor-browser for Tor Browser profile\nfkrone (https://github.com/fkrone)\n\t- fix Zoom profile\nFidel Ramos (https://github.com/haplo)\n\t- added Ledger Live profile\n\t- fixed geeqie profile\n\t- added rawtherapee profile\n\t- added electron-cache profile\nFlorian Begusch (https://github.com/florianbegusch)\n\t- (la)tex profiles\n\t- fixed transmission-common.profile\n\t- fixed standardnotes-desktop.profile\n\t- fix jailprober.py\nfloxo (https://github.com/floxo)\n\t- fixed qml disk cache issue\nFoemass (https://github.com/Foemass)\n\t- documentation\nFoxreef (https://github.com/Foxreef)\n\t- steam profile fixes\nFranco (nextime) Lanza (https://github.com/nextime)\n\t- added --private-template/--private-home\nFrantišek Polášek (https://github.com/fandaa)\n\t- fix QOwnNotes profile\nfuelflo (https://github.com/fuelflo)\n    - added rambox profile\nFred-Barclay (https://github.com/Fred-Barclay)\n\t- lots of profile fixes\n\t- added Vivaldi, Atril profiles\n\t- added PaleMoon profile\n\t- split Icedove and Thunderbird profiles\n\t- added 0ad profile\n\t- fixed version for .deb packages\n\t- added Warzone2100 profile\n\t- blacklisted VeraCrypt\n\t- added Gpredict profile\n\t- added Aweather, Stellarium profiles\n\t- fixed HexChat and Atril profiles\n\t- fixed disable-common.inc for mate-terminal\n\t- blacklisted escape-happy terminals in disable-common.inc\n\t- blacklisted g++\n\t- added xplayer, xreader, and xviewer profiles\n\t- added Brave profile\n\t- added Gitter profile\n\t- various organising\n\t- added LibreOffice profile\n\t- added pix profile\n\t- added audacity profile\n\t- fixed Telegram and qtox profiles\n\t- added Atom Beta and Atom profiles\n\t- tightened 0ad, atril, evince, gthumb, pix, qtox, and xreader profiles\n\t- several private-bin conversions\n\t- added jitsi profile\n\t- pidgin private-bin conversion\n\t- added eom profile\n\t- added gnome-chess profile\n\t- added DOSBox profile\n\t- evince profile enhancement\n\t- tightened Spotify profile\n\t- added xiphos and Tor Browser Bundle profiles\n\t- added xed and pluma profiles\n\t- added Cryptocat profile\n\t- added wireshark profile\n\t- uudeview profile fix\n\t- fixed palemoon and qbittorrent profiles\n\t- compile/install scripts for --git-install/--git-uninstall commands\n\t- tighten keepassx\n\t- added Thunar profile\n\t- added mousepad, qpicview, and cvlc profiles\n\t- added BibleTime profile\n\t- added caja and galculator profiles\n\t- added Catfish profile\nFrederik Olesen (https://github.com/Freso)\n\t- added many vim profiles\nFrostbyte4664 (https://github.com/Frostbyte4664)\n\t- steam.profile: Allow Baba Is You\n\t- blender-3.6 redirect\ng3ngr33n (https://github.com/g3ngr33n)\n\t- fix musl compilation\nG4JC (https://sourceforge.net/u/gaming4jc/profile/)\n\t- ARM support\n\t- profile fixes\nGaman Gabriel (https://github.com/stelariusinfinitek)\n\t- inox profile\nGabriel (https://github.com/gcb)\n\t- okular profile fix\n\t- irssi profile\n\t- syncthing profile\ngeg2048 (https://github.com/geg2048)\n\t- kwallet profile fixes\nglitsj16 (https://github.com/glitsj16)\n\t- evince-previewer, evince-thumbnailer profiles\n\t- gnome-recipes, gnome-logs profiles\n\t- fixed private-lib for gnome-calculator\n\t- gunzip, bunzip2 profiles\n\t- enchant, enchat-2, enchant-lsmod, enchant-lsmod-2 profiles\n\t- atool, soundconvertor, mpd, gnome-calculator, makepkg profile fixes\n\t- acat, adiff, als, apack, arepack, aunpack profiles,\n\t- fix sqlitebrowser blacklist\n\t- spelling fixes\n\t- bitblbee profile fixes\n\t- fix firefox common addons\n\t- many profile fixes\n\t- profile fixes: file, strings, claws-mail,\n\t- new profiles: QMediathekView, aria2c, Authenticator, checkbashisms\n\t- new profiles: devilspie, devilspie2, easystroke, github-desktop, min\n\t- new profiles: bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat\n\t- new profiles: lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep\n\t- new profiles: lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat\n\t- new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore\n\t- new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh\n\t- new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie\n\t- new profiles: masterpdfeditor\nglu8716 (https://github.com/glu8716)\n\t- nicotine: support Fcitx and dconf via dbus-user filter\ngm10 (https://github.com/gm10)\n\t- get_user() do not use the unreliable getlogin()\nGovanifY (https://github.com/GovanifY)\n\t- Blacklisting openrc paths by defaults\ngraywolf (https://github.com/graywolf)\n\t- spelling fix\ngreigdp (https://github.com/greigdp)\n\t- Gajim IM client profile\n\t- fixed spotify profile\n\t- added Slack profile\n\t- add Spotify profile\ngrizzlyuser (https://github.com/grizzlyuser)\n\t- added support for youtube-dl in smplayer profile\nGSI (https://github.com/GSI)\n\t- added Uzbl browser profile\nhaarp (https://github.com/haarp)\n\t- Allow sound for hexchat\n\t- discord-common.profile: harden \u0026 allow notifications\nhamzadis (https://github.com/hamzadis)\n\t- added --overlay-named=name and --overlay-path=path\nHans-Christoph Steiner (https://github.com/eighthave)\n\t- added xournal profile\nHarald Kubota (https://github.com/haraldkubota)\n\t- zsh completion\nHarry Seiler (https://github.com/Xunil73)\n\t- allow netlink in pigdin\nhawkey116477 (https://github.com/hawkeye116477)\n\t- added Waterfox profile\n\t- updated Cyberfox profile\n\t- updated Waterfox profile\nHelmut Grohne (https://github.com/helmutg)\n\t-  compiler support in the build system - Debian bug #869707\nhhzek0014 (https://github.com/hhzek0014)\n\t- updated bibletime.profile\nhknaack (https://github.com/hknaack)\n\t- Kate profile fixes\n\t- seamonkey.profile: support enigmail/gpg\n\t- Avidemux tools support\nhlein (https://github.com/hlein)\n\t- strip out \\r's from jail prober\n\t- make env/arg sanity check failure messages more useful\n\t- relocate firecfg.config to /etc/firejail/\n\t- fix display profile for Gentoo distribution\nHolger Heinz (https://github.com/hheinz)\n\t- manpage work\nHotty Capy (https://github.com/hotcapy)\n\t- softmaker-common.profile: add fstab to private-etc\nHaowei Yu (https://github.com/sfc-gh-hyu)\n\t- add configure options when building rpm\nIcaro Perseo (https://github.com/icaroperseo)\n\t- Icecat profile\n\t- several profile fixes\nIlya Pankratov (https://github.com/i-pankrat)\n\t- profstats fix\n\t- fix various memory resource leaks\nIgor Bukanov (https://github.com/ibukanov)\n\t- found/fiixed privilege escalation in --hosts-file option\niiotx (https://github.com/iiotx)\n\t- use generic.profile by default\nImpyy (https://github.com/Impyy)\n\t- added mumble profile\nintika (https://github.com/intika)\n\t- added musixmatch profile\nirandms (https://github.com/irandms)\n\t- man firecfg fixes\nirregulator (https://github.com/irregulator)\n\t- thunderbird profile fixes for debian stretch\nIrvine (https://github.com/Irvinehimself)\n\t- added conky profile\n\t- added ping, bsdtar, makepkg (Arch), archaudit-report, cower (Arch) profiles\nIvan (https://github.com/ordinary-dev)\n\t- fix telegram profile\nIvan Kozik (https://github.com/ivan)\n\t- speed up sandbox exit\nJaykishan Mutkawoa (https://github.com/jmutkawoa)\n\t- cpio profile\nJames Elford (https://github.com/jelford)\n\t- pass password manager support\n\t- removed shell none from ssh-agent configuration, fixing the infinite loop\n\t- added gcloud profile\n\t- blacklist sensitive cloud provider files in disable-common\nJan-Niclas (https://github.com/0x6a61)\n\t- moved rules from firefox-common.profile to firefox.profile\n\t- blacklist /*firefox* except for firefox itself\n\t- fix Firefox 'Profile not found' - whitelist /run/user/xxx/firefox\nJan Sonntag (https://github.com/jmetrius)\n\t- added OpenStego profile\n\t- allow common access to EGL External platform configuration directory\nJean Lucas (https://github.com/flacks)\n\t- fix Discord profile\n\t- add AnyDesk profile\n\t- add WebStorm profile\n\t- add XMind profile\n\t- add Whalebird profile\n\t- add zulip profile\n\t- add nvm to list of disabled interpreters\n\t- fixes for tor-browser-* profiles\n\t- alias for riot-desktop\n\t- add gnome-mpv profile\n\t- fix wire profile\n\t- fix itch profile\n\t- add Beaker profile\n\t- fixes for gnome-music\n\t- allow reading of system-wide Flatpak locale in gajim profile\nJean-Philippe Eisenbarth (https://github.com/jpeisenbarth)\n\t- fixed spotify.profile\nJeff Squyres (https://github.com/jsquyres)\n\t- various manpage fixes\n\t- cmdline.c: optionally quote the resulting command line\nJericho (https://github.com/attritionorg)\n\t- spelling\nJesse Smith (https://github.com/slicer69)\n\t- added QupZilla profile\njgriffiths (https://github.com/jgriffiths)\n\t- make rpm packages support\nJoan Figueras (https://github.com/figue)\n\t- added abrowser profile\n\t- added Google-Play-Music-Desktop-Player\n\t- added cyberfox profile\nJohn Mullee (https://github.com/jmullee)\n\t- fix empty-string assignment in whitelisting code\nJonas Heinrich (https://github.com/onny)\n\t- added signal-desktop profile\n\t- fixed franz profile\n\t- remove /etc/hosts is_link check for NixOS\n\t- whitelist for NixOS to resolve binary paths in user environment\n\t- NixOS fix OpenGL app support\nJose Riha (https://github.com/jose1711)\n\t- added meteo-qt profile\n\t- created qgis, links, xlinks profiles\n\t- extended profile.template with comments\n\t- some typo and comment fixes in profile.template\n\t- Make it possible for cheese app to save pictures too\n\t- Add davfs2 secrets file to blacklist\n\t- Add profile for udiskie\n\t- fix udiskie.profile\n\t- improve hints for allowing browser access to Gnome extensions connector\n\t- fix warshow, jumpnbump, tremulous, blobwars profile fixes\n\t- drop noinput for games with gampad/joystick support\n\t- goldendict profile fix\n\t- whitelist /usr/share/nextcloud to allow access to translation files\n\t- fix clipgrab profile\n\t- fix Hugin profile\njrabe (https://github.com/jrabe)\n\t- disallow access to kdbx files\n\t- Epiphany profile\n\t- Polari profile\n\t- qTox profile\n\t- X11 fixes\njtrv (https://github.com/jtrv)\n\t- tidal-hifi profile\njuan (https://github.com/nyancat18)\n\t- fixed Kdenlive, Shotcut profiles\n\t- new profiles for Cinelerra, Cliqz, Bluefish\n\t- profile hardening\nk4leg (https://github.com/k4leg)\n\t- fix PyCharm profiles\nKaan Genç (https://github.com/SeriousBug)\n\t- dynamic allocation of noblacklist buffer\nKaroshi42 (https://github.com/karoshi42)\n\t- update dino-im.profile\nKellerFuchs (https://github.com/KellerFuchs)\n\t- nonewpriv support, extended profiles for this feature\n\t- make `restricted-network` prevent use of netfilter\n\t- disable-common.inc additions\n\t- make mutt and msmtp's rc files read-only\n\t- added support for .local profile files in /etc/firejail\n\t- fixed Cryptocat profile\n\t- make ~/.local read-only\nKelvin (https://github.com/kmk3)\n\t- disable ldns utilities, dnssec-*, khost, unbound-host\n\t- sort DNS / RUNUSER paths\n\t- improve bug_report.md\n\t- fix keypassxc\n\t- blacklist oksh shell in disable-shell.inc\nKishore96in (https://github.com/Kishore96in)\n\t- added falkon profile\n\t- kxmlgui fixes\n\t- okular profile fixes\n\t- jitsi-meet-desktop profile\n\t- konversatin profile fix\n\t- added Neochat profile\n\t- added whitelist-1793-workaround.inc\nKOLANICH (https://github.com/KOLANICH)\n\t- added symlink fixer fix_private-bin.py in contrib section\n\t- update fix_private-bin.py\n\t- fix meld\n\t- temporary fix to the bug caused by apparmor profiles stacking\nKonstantin (https://github.com/konstantin1722)\n\t- obsidian profile\nkortewegdevries (https://github.com/kortewegdevries)\n\t- a whole bunch of new profiles and fixes\n\t- whitelisting evolution, kmail\nKristóf Marussy (https://github.com/kris7t)\n\t- dns support\nkuesji koesnu (https://github.com/kuesji)\n\t- unit suffixes for rlimit-fsize and rlimit-as\n\t- util.c and firejail.h fixes\n\t- better parser for size strings\nKunal Mehta (https://github.com/legoktm)\n\t- converted all links to https in manpages\nkzsa (https://github.com/kzsa)\n\t- wusc: add /usr/share/locale-langpack (LC_MESSAGES)\nlaniakea64 (https://github.com/laniakea64)\n\t- added fj-mkdeb.py script to build deb packages\nLari Rauno (https://github.com/tuutti)\n\t- qutebrowser profile fixes\nLaurent Declercq (https://github.com/nuxwin)\n\t- fixed test for shell interpreter in chroots\nLaurentGH (https://github.com/LaurentGH)\n\t- allow private-bin parameters to be absolute paths\nlayderv (https://github.com/layderv)\n\t- prevent sandbox name from containing only digits\n\t- clean escape control characters from the command line\n\t- check hostname syntax\nlecso7 (https://github.com/lecso7)\n\t- added goldendict profile\n\t- allow evince to read .cbz file format\nleukimi (https://github.com/leukimi)\n\t- 0ad.profile: fix libmozjs error on OpenSUSE Tumbleweed\nLoïc Damien (https://github.com/dzamlo)\n\t- small fixes\nLiorst4 (https://github.com/Liorst4)\n\t- Preserve CFLAGS given to configure in common.mk.in\n\t- fix emacs config to load as read-write\n\t- disable browser drm by default\n\t- minetest fixes\nLockdis (https://github.com/Lockdis)\n\t- Added crow, nyx, and google-earth-pro profiles\nluca0N (https://github.com/luca0N)\n\t- fixed crawl profile\nLucas (https://github.com/lucasmz-dev)\n\t- disable-common: add bubblejail paths\n\t- added b3smum (blake3) profile\n\t- firecfg: fix sha384sum \u0026 add b2sum/cksum\n\t- device-flasher.linux profile\nLukáš Krejčí (https://github.com/lskrejci)\n\t- fixed parsing of --keep-var-tmp\nluzpaz (https://github.com/luzpaz)\n\t- code spelling fixes\nlxeiqr (https://github.com/lxeiqr)\n\t- fix sndio support\nMace Muilman (https://github.com/mace015)\n\t- google-chrome{,beta,unstable} flags\nmaces (https://github.com/maces)\n\t- Franz messenger profile\nMadura A (https://github.com/manushanga)\n\t- floader\nmahdi1234 (https://github.com/mahdi1234)\n\t- cherrytree profile\n\t- Seamonkey profiles\nmammo0 (https://github.com/mammo0)\n\t- remove 'text/plain' from firejail-profile.lang.in\nManuel Dipolt (https://github.com/xeniter)\n\t- stack alignment for the ARM Architecture\nMarek Küthe (https://github.com/marek22k)\n\t- allow loading plugins in gajim\n\t- allow bsfilter in email-common.profile\n\t- email-common.profile: allow clamav plugin for claws-mail\n\t- VSCodium: Fix developing Arduino\nMartin Carpenter (https://github.com/mcarpenter)\n\t- security audit and bug fixes\n\t- Centos 6.x support\nMartin Dosch (spam-debian@mdosch.de)\n\t- support for gnome-shell integration addon in Firefox\n\t  (Bug-Debian: https://bugs.debian.org/872720)\nMartin Sandsmark (https://github.com/sandsmark)\n\t- songrec profile\nMartynas Janonis (https://github.com/mjanonis)\n\t- update wrc for Arch Linux\nMatt Parnell (https://github.com/ilikenwf)\n\t- whitelisting for core firefox related functionality\nMattias Wadman (https://github.com/wader)\n\t- seccomp errno filter support\nMatthew Gyurgyik (https://github.com/pyther)\n\t- rpm spec and several fixes\nMatthew Cline (https://github.com/matthew-cline)\n\t- steam profile and dropbox profile fixes\nmatthew-sharp (https://github.com/matthew-sharp)\n\t- profiles: discord-common: add env to private-bin (#6738)\nmatu3ba (https://github.com/matu3ba)\n\t- evince hardening, dbus removed\n\t- fix dia profile\n\t- several template fixes\nmaxice8 (https://github.com/maxice8)\n\t- fixed missing header\nMelvin Vermeeren (https://github.com/melvinvermeeren)\n\t- added teamspeak3 profile\n\t- added --noautopulse command line option\nMichael Haas (https://github.com/mhaas)\n\t- bugfixes\nMichael Hoffmann (https://github.com/brisad)\n\t- added support for subdirs in private-etc\nMichele Sorcinelli (https://github.com/michelesr)\n\t- fix ssh profile\nMike Frysinger (vapier@gentoo.org)\n\t- Gentoo compile patch\nminus7 (https://github.com/minus7)\n\t- fix hanging arp_check\nmirabellette (https://github.com/mirabellette)\n\t- add comment to thunderbird.profile to allow Firefox to load profiles\nmjudtmann (https://github.com/mjudtmann)\n\t- lock firejail configuration in disable-mgmt.inc\nMohammed Anas  (https://github.com/mhmdanas)\n\t- fix dbus notifications\n\t- fix libEGL warning for abiword\nm00nwtchr (https://github.com/m00nwtchr)\n\t- Whitelist electron-flags.conf for all versions of electron\n\t- electron profile updates\n\t- Fix glob pattern and update other profiles/includes (electron profile)\nmustaqimM (https://github.com/mustaqimM)\n\t- added profile for Nylas Mail\nn1trux (https://github.com/n1trux)\n\t- fix flashpeak-slimjet profile typos\nnblock (https://github.com/nblock)\n\t- cmus: allow access to resolv.conf\nneirenoir (https://github.com/neirenoir) and noir \u003cnoir@neire.dev\u003e\n\t- fixed Blender profile being unable to import numpy\nNeo00001 (https://github.com/Neo00001)\n\t- add vmware profile\n\t- update virtualbox profile\n\t- update telegram profile\n\t- add spectacle profile\n\t- add kdiff3 profile\nNeotamandua (https://github.com/Neotamandua)\n\t- add Discord PTB profile\nnetcarver (https://github.com/netcarver)\n\t- prevent access to LUKS keyfile\nNetSysFire (https://github.com/NetSysFire)\n\t- update weechat profile\n\t- update megaglest profile\n\t- added parsecd profile\n\t- fix minecraft-launcher.profile\n\t- singularity profile\n\t- godot profile fixes\n\t- profiles: godot: remove noinput so gamepads work (#6707)\nNick Fox (https://github.com/njfox)\n\t- add a profile alias for code-oss\n\t- add code-oss config directory\n\t- fix wire-desktop.profile on arch\nNickMolloy (https://github.com/NickMolloy)\n\t- ARP address length fix\nNico (https://github.com/dr460nf1r3)\n\t- added FireDragon profile\nNicola Davide Mannarelli (https://github.com/nidamanx)\n\t- fix \"Could not create AF_NETLINK socket\"\n\t- added nextcloud profiles\n\t- Firefox, KeepassXC, Telegram fixes\nNiklas Haas (https://github.com/haasn)\n\t- blacklisting for keybase.io's client\nNiklas Goerke (https://github.com/Niklas974)\n\t- update QOwnNotes profile\nNikos Chantziaras (https://github.com/realnc)\n\t- fix audio support for Discord\nnolanl (https://github.com/nolanl)\n\t- added localtime to signal-desktop's profile\nnorthboot (https://github.com/northboot)\n\t- remmina-file-wrapper profile\n\t- ouch profile\n\t- keep plugdev group unless nou2f is used\n\t- xarchiver profile\nnutta-git (https://github.com/nutta-git)\n\t- steam.profile: allow process_vm_readv syscall\n\t- lutris.profile: allow more syscalls\n\t- steam.profile: update novideo comment for webcam motion trackers\n\t- more lutris.profile problems\nnyancat18 (https://github.com/nyancat18)\n\t- added ardour4, dooble, karbon, krita profiles\nnya1 (https://github.com/nya1)\n\t- remove apparmor options in --help when building without apparmor support\nOndra Nekola (https://github.com/satai)\n\t- allow firefox theming with non-global themes\nOndrejMalek (https://github.com/OndrejMalek)\n\t- various manpage fixes\nOndřej Nový (https://github.com/onovy)\n\t- allow video for Signal profile\n\t- added Mattermost desktop profile\n\t- hardened Zoom profile\n\t- hardened Signal desktop profile\nLorenzo \"Palinuro\" Faletra (https://github.com/PalinuroSec)\n\t- prevent thunderbird conflicts when firefox is running\n\t- add join-or-start to pluma to open multiple files in tabs\n\t- fixes to keepassxc, thunderbird and pluma\nPanzerfather (https://github.com/Panzerfather)\n\t- allow eog to access user's trash\nPatrick Schleizer (https://github.com/adrelanos)\n\t- fix tb-starter-wrapper profile\nPatrick Toomey (https://sourceforge.net/u/ptoomey/profile/)\n\t- user namespace implementation\nPaul Moore \u003cpmoore@redhat.com\u003e\n\t-src/fsec-print/print.c extracted from libseccomp software package\nPaupiah Yash (https://github.com/CaffeinatedStud)\n\t- gzip profile\nPawel (https://github.com/grimskies)\n\t- make --join return exit code of the invoked program\nPedro Riberio (https://github.com/pedrib)\n\t- fix typo in pycharm-professional include\nPeter Millerchip (https://github.com/pmillerchip)\n\t- memory allocation fix\n\t- --private.keep to --private-home transition\n\t- support for files and directories starting with ~ in blacklist option\n\t- support for files and directories with spaces in blacklist option\n\t- lots of other fixes\n\t- implement the --allow-private-blacklist option\nPeter Hogg (https://github.com/pigmonkey)\n\t- WeeChat profile\n\t- rtorrent profile\n\t- bitlbee profile fixes\n\t- mutt profile fixes\n\t- fixes for youtube-dl in mpv profile\nPeter Sanford (https://github.com/psanford)\n\t- fix QtWebEngine in zoom\nPetter Reinholdtsen (pere@hungry.com)\n\t- Opera profile patch\nPeter Zmanovsky (https://github.com/peter15914)\n\t- fix memory leak in fs_home.c\nPharmaceuticalCobweb (https://github.com/PharmaceuticalCobweb)\n\t- fix quiterss profile\n\t- added profile for gnome-ring\npholodniak (https://github.com/pholodniak)\n\t- profstats fixes\npianoslum (https://github.com/pianoslum)\n\t- nodbus breaking evince two-page-view warning\npirate486743186 (https://github.com/pirate486743186)\n\t- KMail profile\n\t- mpsyt profile\n\t- fix youtube-dl and mpv\n\t- fix gnome-mpv profile\n\t- fix gunzip profile\n\t- reorganizing youtube-viewers\n\t- fix pluma profile\n\t- whitelist /var/lib/aspell\n\t- mcomix fixes\n\t- fixing engrampa profile\n\t- adding qcomicbook and pipe-viewer in disable-programs\n\t- newsboat/newsbeuter profiles\n\t- fix atril profile\n\t- reorganizing links browsers\n\t- added rtv, alpine, mcomix, qcomicbook, googler, ddgr profiles\n\t- w3m, zahura, profile.template fixes\nPixel Fairy (https://github.com/xahare)\n\t- added fjclip.py, fjdisplay.py and fjresize.py in contrib section\nPizzaDude (https://github.com/pizzadude)\n\t- add mpv support to smplayer\n\t- added profile for torbrowser-launcher\n\t- added profile for sayonara and qmmp\n\t- remove tracelog from Firefox profile\n\t- fix welcome.sh\npolyzen (https://github.com/polyzen)\n\t- fixed wusc issue with mpv/Vulkan\npowerjungle (https://github.com/powerjungle)\n\t- fixed multimc\n\t- build: add --disable-sandbox-check configure flag\n\t- build: call autoreconf to match new autoconf version\n\t- update distribution table \u0026 add note in SECURITY.md\n\t- (SECURITY.md): add message below table regarding distribution versions\n\t- (SECURITY.md): add two more distributions with LTS support for firejail\n\t- (SECURITY.md): update latest firejail version for still supported distros\n\t- (SECURITY.md): remove distributions which have reached end-of-life\n\t- docs: improve whitelist and blacklist descriptions in man pages\n\t- bugfix: do not interact with dbus directory if dbus proxy is disabled\nprobonopd (https://github.com/probonopd)\n\t- automatic build on Travis CI\npshpsh (https://github.com/pshpsh)\n\t- added FossaMail profile\npstn (https://github.com/pstn)\n\t- added install-strip, make install without strip\npszxzsd (https://github.com/pszxzsd)\n\t-uGet profile\npwnage-pineapple (https://github.com/pwnage-pineapple)\n\t- update Okular profile\nqdii (https://github.com/qdii)\n\t- added notpm command \u0026 keep tpm devices in private-dev\n\t- keepassxc: add new socket location\nQuentin Retornaz (https://github.com/qretornaz-adapei42)\n\t- microsoft-edge profiles fixes\nQuentin Minster (https://github.com/laomaiweng)\n\t- propagate --quiet to children Firejail'ed processes\n\t- nodbus enhancements/bugfixes\n\t- added vim syntax and ftdetect files\n\t- Allow exec from /usr/libexec \u0026 co. with AppArmor\nra1nb0w (https://github.com/ra1nb0w)\n\t- fix vmware profile\nRafael Cavalcanti (https://github.com/rccavalcanti)\n\t- chromium profile fixes for Arch Linux\nRahiel Kasim (https://github.com/rahiel)\n\t- Mathematica profile\n\t- whitelisted Dropbox profile\n\t- whitelisted keysnail config for firefox\n\t- added telegram-desktop profile\nRahul Golam (https://github.com/technoLord)\n\t- strings profile\nRandomVoid (https://github.com/RandomVoid)\n\t- fix building C# projects in Godot\n\t- fix Lutris profile\n\t- fix running games with enabled Feral GameMode in Lutris\nRaphaël Droz (https://github.com/drzraf)\n\t- zoom profile fixes\nrealaltffour (https://github.com/realaltffour)\n\t- add lynx support to newsboat profile\nReed Riley (https://github.com/reedriley)\n\t- cointop profile\n\t- 1password profile\n\t- blacklist rclone, 1Password, Ledger Live and cointop\n\t- allow Signal to open links in Firefox\nReiner Herrmann (https://github.com/reinerh)\n\t- a number of build patches\n\t- man page fixes\n\t- Debian and Ubuntu integration\n\t- clang-analyzer fixes\n\t- Debian reproducible build\n\t- unit testing framework\n\t- moved build to .xz\n\t- detached signatures for source archive\n\t- recursive mkdir\nRemco Verhoef (https://github.com/nl5887)\n\t- add overlay configuration to profiles\n\t- prevent running shells recursively\nRenkoto (https://github.com/Renkoto)\n\t- floorp profile fixes\n\t- profiles: firefox: add comment about creating PWA shortcuts (#6689)\nRD PROJEKT (https://github.com/RDProjekt)\n\t- noblacklist support for /sys/module directory\n\t- whitelist support for /sys/module directory\n\t- support AMD GPU by OpenCL in Blender\nrogshdo (https://github.com/rogshdo)\n\t- BitlBee profile\nrootalc (https://github.com/rootalc)\n\t- add nolocal6.net filter\nRuan (https://github.com/ruany)\n\t- fixed hexchat profile\nRundownRhino (https://github.com/RundownRhino)\n\t- firefox profile fix\nrusty-snake (https://github.com/rusty-snake)\n\t- added profiles: thunderbird-wayland, supertuxkart, ghostwriter\n\t- added profiles: klavaro, mypaint, mypaint-ora-thumbnailer, nano\n\t- added profiles: gajim-history-manager, freemind, nomacs, kid3\n\t- added profiles: kid3-qt, kid3-cli, anki, utox, mp3splt, mp3wrap\n\t- added profiles: oggsplt, flacsplt, cheese, inkview, mp3splt-gtk\n\t- added profiles: ktouch, yelp, klatexformula, klatexformula_cmdl\n\t- added profiles: pandoc, gnome-sound-recorder, godot, newsbeuter\n\t- added profiles: keepassxc-cli, keepassxc-proxy, rhythmbox-client\n\t- added profiles: zeal, gnome-characters, gnome-character-map\n\t- many profile fixing and hardening\n\t- some typo fixes\n\t- added profile templates\n\t- added sort.py to contrib\nSadoon Al-Bader (https://github.com/Sadoon-AlBader)\n\t- fix misc in kmail and transmission-qt \u0026 add kontact.profile\nsak96 (https://github.com/sak96)\n\t- discord profile fixes\n\t- Fix Firefox 'Profile not found' for psd (v6.45)\nSalvo 'LtWorf' Tomaselli (https://github.com/ltworf)\n\t- fixed ktorrent profile\nsarneaud (https://github.com/sarneaud)\n\t- rewrite globbing code to fix various minor issues\n\t- added noblacklist command for profile files\n\t- various enhancements and bug fixes\nSebastian Hafner (https://github.com/DropNib)\n\t- profile support for allow-debuggers\nSenemu (https://github.com/Senemu)\n\t- protection for .pythonrc.py\n\t- fixed evince\nSeonwoo Lee (https://github.com/seonwoolee)\n\t- fix teams ignoring input sources e.g. microphones\nSergey Alirzaev (https://github.com/l29ah)\n\t- firejail.h enum fix\n\t- firefox-common-addons.inc: + tridactyl\nSerphentas (https://github.com/Serphentas)\n\t- add Paradox Launcher to Steam profile\nSlava Monich (https://github.com/monich)\n\t- added configure option to disable man pages\nSimon Peter (https://github.com/probonopd)\n\t- set $APPIMAGE and $APPDIR environment variables\n\t- AppImage version detection\n\t- Leafppad type v1 and v2 appimage packages in test/appimage\n\t- GitHub/Travis CI integration\nSimo Piiroinen (https://github.com/spiiroin)\n\t- Jolla/SailfishOS patches\n\t- fix startup race condition for /run/firejail directory\nsinkuu (https://github.com/sinkuu)\n\t- blacklisting kwalletd\n\t- fix symlink invocation for programs placing symlinks in $PATH\nslowpeek (https://github.com/slowpeek)\n\t- refine appimage example in docs\n\t- allow resolution of .local names with avahi-daemon in the apparmor profile\n\t- allow access to avahi-daemon in apparmor/firejail-default\n\t- make appimage examples consistent with --appimage option short description\n\t- blacklist google-drive-ocamlfuse config\n\t- blacklist sendgmail config\nShahriar Heidrich (https://github.com/smheidrich)\n\t- fix manpages\n\t- fix i3 profile and disable-programs.profile\nsmitsohu (https://github.com/smitsohu)\n\t- read-only kde4 services directory\n\t- enhanced mediathekview profile\n\t- added tuxguitar profile\n\t- removed nodvd from k3b profile\n\t- lots of profile hardening and fixes\n\t- added MuseScore profile\n\t- fixed device discovery for simple-scan\n\t- add novideo support in many profiles\n\t- improve server profiles, harden musescore\n\t- snap profile cleanup\n\t- tighten some capability sets further\n\t- enhance mutt, goobox, baloo and clementine profiles\nsoredake (https://github.com/soredake)\n\t- fix steam startup with \u003e=llvm-4\n\t- fix handling of STEAM_RUNTIME_PREFER_HOST_LIBRARIES in steam profile\n\t- fix keepassxc.profile\n\t- fix qtox.profile\n\t- add localtime to private-etc to make qtox show correct time\n\t- fixes for the keepassxc 2.2.5 version\nSkewedZeppelin (https://github.com/SkewedZeppelin)\n\t- added Bless, Gnome 2048, Gnome Calculator, Gnome Contacts, JD-GUI,\n\t  Lollypop, MultiMC5 profiles\n\t- added PDFSam, Pithos, and Xonotic profiles\n\t- disabled Go, Rust, and OpenSSL in disable-devel.conf\n\t- added dino profile\n\t- added Kodi profile\n\t- lots of profile tightening\n\t- added viking, youtube-dl, meld profiles\n\t- added Arduino profile\n\t- lots of profile hardening and fixing\n\t- firecfg enhancements\n\t- fixed vlc profile\n\t- fixed wget profile\n\t- fixed firecfg.config file\n\t- added novideo and disable-mnt support in all profile files\n\t- added Peek and silent profiles\n\t- added IntelliJ IDEA and Android Studio profiles\n\t- added arm profile\n\t- lots of profile improvements/tightening\n\t- added apktool, baobab, dex2jar, gitg, hashcat, obs, picard, remmina,\n\t  sdat2img,\n\tsoundconverter, sqlitebrowser, and truecraft profiles\n\t- added gnome-twitch profile\n\t- Unified all 341 profiles\n\t- profile tightening with private-bin\n\t- fix notv and nodvd placement\n\t- added novideo and noexec /tmp to Tor browser profile\n\t- fixed Gnome 2048 on wayland\n\t- added Neverball profile\n\t- hardern /var\n\t- profile standard layout\n\t- Spotify and itch.io profile fixes\nSpacewalker2 (https://github.com/Spacewalker2)\n\t- fix  MediathekView profile\nsshirokov (https://sourceforge.net/u/yshirokov/profile/)\n\t- Patch to output \"Reading profile\" to stderr instead of stdout\nSYN-cook (https://github.com/SYN-cook)\n\t- keepass/keepassx browser fixes\n\t- disable-common.inc fixes\n\t- blacklist GNOME keyring and Konqueror\n\t- fixed Keepass(x) profiles\n\t- Engrampa profile\n\t- Scribus profile\n\t- autostart blacklist for KDE\n\t- blacklist startup scripts\n\t- various profile updates\n\t- blacklist lots of KDE files\n\t- blacklist nautilus and nemo in ~/.local/share/\n\t- added mediathekview profile\n\t- blacklist attic and borg\n\t- cleaned up Okular and Gwenview profiles\n\t- added baloo_file profile\n\t- k3b profile update\n\t- noexec changes\n\t- gnome-calculator changes\nstartx2017 (https://github.com/startx2017)\n\t- syscall list update\n\t- updated default seccomp filters - added bpf, clock_settime,\n\t  personality, process_vm_writev, query_module, settimeofday, stime,\n\t  umount, userfaultfd, ustat, vm86, and vm86old\n\t- enable/disable join support in /etc/firejail/firejail.config\n\t- firecfg fix: create ~/.local/share/applications directory if it\n\t  doesn't exist\n\t- firejail.config cleanup\n\t- --quiet fixes\n\t- bugfixes branches maintainer\n\t- firemon --top speed-up\n\t- Blender and 2048-qt profiles\n\t- handbrake profile\n\t- mplayer and smplayer profiles\n\t- kwrite and geary profiles\nStelFux (https://github.com/StelFux)\n\t- Fix youtube video in totem\nsudoAlphaX (https://github.com/sudoAlphaX)\n\t- vesktop profile\nSyed Muhammad Shuja Haider (https://github.com/xplanthris)\n\t- prismlauncher profile\nthe-antz (https://github.com/the-antz)\n\t- Fix libx265 encoding in ffmpeg profile\n\t- Fix Firefox profile\n\t- Profile tweaks\nTheOneric (https://github.com/TheOneric)\n\t- Fix newest Steam client and Proton ≥ 5.13\n\t- Fix black window in Steam client\nthewisenerd (https://github.com/thewisenerd)\n\t- allow multiple private-home commands\n\t- use $SHELL variable if the shell is not specified\n\t- appimage: pass commandline arguments\nThijs Raymakers (https://github.com/ThijsRay)\n\t- keepassxc: Allow offering the Secret Service\nThomas Jarosch (https://github.com/thomasjfox)\n\t- disable keepassx in disable-passwdmgr.inc\n\t- added uudeview profile\n\t- added tar (gtar), unzip and unrar profile\n\t- added file profile\n\t- improved profile list\n\t- fixed small variable glitch in stat64() / lstat64() (libtracelog)\n\t- added lstat() / lstat64() support to libtrace\n\t- include mkuid.sh in make dist\n\t- cppcheck bugfixes\nTimo Hardebusch (https://github.com/tihadot)\n\t- add signal-cli profile\n\t- KeePassXC: added a warning regarding tray icon\ntinmanx (https://github.com/tinmanx)\n\t- remove network access from cherrytree.profile\nTom Mellor (https://github.com/kalegrill)\n\t- mupen64plus profile\nTomasz Jan Góralczyk (https://github.com/tjg)\n\t- fixed Steam profile\nTomi Leppänen (https://github.com/Tomin1)\n\t- Jolla/SailfishOS patches\nTobias Schmidl (https://github.com/schtobia)\n\t- added profile for webui-aria2\nTopi Miettinen (https://github.com/topimiettinen)\n\t- improved seccomp printing\n\t- improve mount handling, fix /run/user handling\n\t- /proc/sys can be nosuid,noexec,nodev\n\t- seccomp default list update\n\t- improve loading of seccomp filter and memory-deny-write-execute feature\n\t- private-lib feature\n\t- make --nodbus block also system D-Bus socket\nTed Robertson (https://github.com/tredondo)\n\t- webstorm profile fixes\n\t- added bcompare profile\n\t- various documentation fixes\n\t- blacklist Exodus wallet\n\t- blacklist monero-project directory\n\t- several README file fixes\n\t- use GitHub issues as the bug reporting address\n\t- fix documentation for selinux\ntools200ms (https://github.com/tools200ms)\n\t- fixed allow-ssh.inc\nTus1688 (https://github.com/Tus1688)\n\t- added neovim profile\nuser1024 (user1024@tut.by)\n\t- electron profile whitelisting\n\t- fixed Rocket.Chat profile\n\t- nheko profile\nvaloq (https://github.com/valoq)\n\t- lots of profile fixes\n\t- added support for /srv in --whitelist feature\n\t- Eye of GNOME, Evolution, display (imagemagik) and Wire profiles\n\t- blacklist suid binaries in disable-common.inc\n\t- fix man pages\n\t- added keypass2, qemu profiles\n\t- added amarok, ark, atool, bleachbit, brasero, dolphin, dragon, elinks, enchant, exiftool profiles\n\t- added file-roller, gedit, gjs,gnome-books, gnome-documents, gnome-maps, gnome-music profiles\n\t- added gnome-photos, gnome-weather, goobox, gpa, gpg, gpg-agent, highlight profiles\n\t- added img2txt, k3b, kate, lynx, mediainfo, nautilus, odt2txt, pdftotext, simple-scan profiles\n\t- added skanlite, ssh-agent, transmission-cli, tracker, transmission-show, w3m, xfburn, xpra profiles\n\t- added wget profile\n\t- disable gnupg and systemd directories under /run/user\n\t- added iridium browser profile\nVadim A. Misbakh-Soloviov (https://github.com/msva)\n\t- profile fixes\nValdikSS (https://github.com/ValdikSS)\n\t- Psi+, Corebird, Konversation profiles\n\t- various profile fixes\nVarun Sharma (https://github.com/varunsh-coder)\n\t- update allowed endpoints\n\t- build(deps): bump step-security/harden-runner from 2.5.0 to 2.5.1\nVasya Novikov (https://github.com/vn971)\n\t- Wesnoth profile\n\t- Hedegewars profile\n\t- manpage fixes\n\t- fixed firecfg clean/clear issue\n\t- found the ugliest bug so far\n\t- seccomp debug description in man page\n\t- seccomp syscall list update for glibc 2.26-10\nVeeti Paananen (https://github.com/veeti)\n\t- fixed Spotify profile\nveloute (https://github.com/veloute)\n\t- added standardnotes profile\n\t- added flameshot profile\n\t- added jdownloader profile\n\t- fixed discord profile\n\t- fixes for various profiles\n\t- removed vim and ranger from firecfg\n\t- fixing keepassxc auto-type, noexec /tmp\n\t- fix ipc-namespace prblem in file-roller\n\t- fix exiftool, viewnior, aria2c, ffmpegthumbnailer\n\t- fix pavucontrol (ipcnamespace)\n\t- fix gnuchess\n\t- add anki profile\nVincent43 (https://github.com/Vincent43)\n\t- apparmor enhancements\nVincent Blillault (https://github.com/Feandil)\n\t- fix mumble profile\nVincent Lefèvre (https://github.com/vinc17fr)\n\t- blacklist rxvt after the blacklist of Perl\n\t- Noblacklist rxvt in allow-perl.inc\nvismir2 (https://github.com/vismir2)\n\t- feh, ranger, 7z, keepass, keepassx and zathura profiles\n\t- claws-mail, mutt, git, emacs, vim profiles\n\t- lots of profile fixes\n\t- support for truecrypt and zuluCrypt\nviq (https://github.com/viq)\n\t- discord-canary profile\nVladimir Gorelov (https://github.com/larkvirtual)\n\t- added Yandex browser profile\nVladimir Schowalter (https://github.com/VladimirSchowalter20)\n\t- apparmor profile enhancements\n\t- various KDE profile enhancements\n\t- read-only kde5 services directory\nVladislav Nepogodin (https://github.com/vnepogodin)\n\t- added Librewolf profiles\n\t- added Sway profile\n\t- fix CLion profile\n\t- fixes for disable-programs.inc\n\t- CachyBrowser profile\nweebnix (https://github.com/weebnix)\n\t- block /dev/ntsync \u0026 add keep-dev-ntsync command\nHugo Osvaldo Barrera (https://github.com/WhyNotHugo)\n\t- Skype profile tweaks\n\t- whitelist-ro command\nxee5ch (https://github.com/xee5ch)\n\t- skypeforlinux profile\nYork Zhao (https://github.com/YorkZ)\n\t- tor browser profile fix\n\t- allow telegram to open hyperlinks\nYpnose (https://github.com/Ypnose)\n\t- disable-shell.inc: add mksh shell\nydididodat (https://github.com/ydididodat)\n\t- bleachbit.profile: allow erasing Trash contents\nyumkam (https://github.com/yumkam)\n\t- add compile-time option to restrict --net= to root only\n\t- man page fixes\nYves-Alexis Perez (https://github.com/corsac-s)\n\t- signal-desktop profile fix\n\t- signal: add access to D-Bus freedesktop.org secret API\nZack Weinberg (https://github.com/zackw)\n\t- added support for joining a persistent, named network namespace\n\t- removed libconnect\n\t- fixed memory corruption in noblacklist processing\n\t- rework DISPLAY environment parsing\n\t- rework masking X11 sockets in /tmp/.X11-unix directory\n\t- rework xpra and xephyr detection\n\t- rework abstract X11 socket detection\n\t- rework X11 display number assignment\n\t- rework X11 xorg processing\n\t- rework fcopy, --follow-link support in fcopy\n\t- follow link support in --private-bin\n\t- wait_for_other function rewrite\n\t- Xvfb X11 server support\n\t- Xvfb and Xephyr profiles, modified Xpra profile\n\t- support for sandboxing Xpra, Xvfb and Xephyr in independent sandboxes\n\t  when started with firejail --x11\n\t- support for xpra-extra-params in firejail.config\nzupatisc (https://github.com/zupatisc)\n\t- patch-util fix\n\nCopyright (C) 2014-2025 Firejail Authors\n","funding_links":[],"categories":["C","Linux Defences","HarmonyOS","AppImage consumption tools","Applications","Security","工具","C (286)","Security \u0026 Privacy","others","System","Operating Systems"],"sub_categories":["Notable Mentions","Windows Manager","Sandboxes","Security","Sensor and Acuator Interfaces","效率工具","Hardening","Utilities","Linux Defenses"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnetblue30%2Ffirejail","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fnetblue30%2Ffirejail","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnetblue30%2Ffirejail/lists"}