Firejail: https://firejail.wordpress.com/support/#userns outdated

Created on 27 Mar 2018  路  4Comments  路  Source: netblue30/firejail

Arch Linux has supported user namespaces in the linux package/s since version 4.14.4-2. The bug mentioned is closed.

Most helpful comment

@Fred-Barclay yes, I should say "restricted" rather than "disabled". I have no idea if firejail use namespaces when they're restricted to root. Maybe @netblue30 could clear that for us. Also I read that privileged namespaces have no security value.

All 4 comments

It's supported but still disabled by default. It's exactly what Debian does for a long time.

Thanks, I modified the web page. The problem was user namespace wasn't compiled in the kernel, so they put it in and disabled it. We can use it even if it is disabled.

@Vincent43 it's enabled for root though (or other similarly-priviledged users), right? Since firejail uses SUID, is it able to use namespaces?
I did noticed that I no longer get the Warning: noroot option is not available on Arch. I'm not sure if this is because namespaces are now compiled in but non-accessible to firejail, or if firejail is actually able to use them.

@Fred-Barclay yes, I should say "restricted" rather than "disabled". I have no idea if firejail use namespaces when they're restricted to root. Maybe @netblue30 could clear that for us. Also I read that privileged namespaces have no security value.

Was this page helpful?
0 / 5 - 0 ratings