This guide collects Linux kernel and userland settings for improving security and usability, targeting Arch Linux and potentially other distributions.
Firejail
Firejail restricts untrusted applications in a Linux sandbox using namespaces and seccomp-bpf.
About Firejail
Firejail is a program for Linux that restricts untrusted applications using Linux namespaces and seccomp-bpf. It gives a process and its descendants a private view of shared kernel resources such as the network stack, process table and mount table, and applies file-system access controls that limit access to passwords, keys and private data.
It runs on Linux computers with a 3.x kernel version or newer and is started by prefixing a command with “firejail”. It includes profiles for programs such as Firefox, Chromium, VLC and Transmission, plus the Firetools graphical interface and the FDNS DNS over HTTPS proxy.
Key features
- Isolate apps with Linux namespaces and seccomp-bpf
- Provide private network stack, process and mount views
- Sandbox servers, graphical apps and login sessions
- Include profiles for Firefox, Chromium, VLC, Transmission
- Restrict file access to config files and Downloads directory
- Offer Firetools Qt5 interface and FDNS DoH proxy
Best for: Home users and Linux beginners on the Linux desktop who want to run applications with restricted system and file access.
Good for
- Lightweight C implementation with virtually no dependencies and low overhead
- Includes profiles for a large number of Linux desktop programs
- Runs without background daemons or open socket connections
Watch out for
- Works only on Linux with kernel version 3.x or newer
Firejail at a glance
- Website
- firejail.wordpress.com
- Category
- Privacy & Security › Desktop & OS Privacy
- Type
- Website
- Pricing
- Not confirmed. Check the site
- Platforms
- Linux, Web
- Open source
- Not stated
- Language
- English
- Last checked
- Oct 5, 2026 · Online when checked
- Listed
- Oct 5, 2026
Firejail alternatives
Tools and sites you could use instead, ranked by how closely they match.
Tracee monitors runtime security events and supports forensic analysis with eBPF instrumentation.
Qubes OS is a free, open-source operating system for personal computers that uses compartmentalization as a security approach.
Follow this evolving guide for steps and configuration examples to secure a Linux server.
Harden Linux servers and deploy LAMP or LEMP stacks with JShielder’s security script.
Open source
20 alternatives
Set USB device authorization rules with USBGuard, a framework for controlling device access.
Open source
24 alternativesPopular in Desktop & OS Privacy
Well-known listings from the same topic.
wBlockapps.apple.com/app/wblock/id6746388723uBO Lite Safariapps.apple.com/app/ublock-origin-lite/id674534…Stayapps.apple.com/app/stay-for-safari/id1591620171Lockdown Privacylockdownprivacy.comTor Browsertorproject.orgHyphanethyphanet.org
Firejail FAQ
How do I start a program with Firejail?
Prefix the command with firejail, for example "firejail firefox" or "firejail vlc".
Which systems can run Firejail?
Any Linux computer with a 3.x kernel version or newer.
What are Firetools and FDNS?
Firetools is a Qt5 graphical interface with tray launcher and sandbox management; FDNS is a DNS over HTTPS proxy that uses non-logging providers.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.