Firecfg will configure all symbolic links at once, but how do I create a single symbolic link to firejail a specific application that isn't securely preconfigured by for example, SELinux?


Because Firejail increases attack surface in some respects, it is wise to limit FIrejail to be applicaiton specific on pre-configured SELinux distros. In the case of SELinux, you will want to find out first if your application is protected by SELinux, and if it is not, then it is wise to use firejail for that specific application instead.

List SELinux enforcements semanage fcontext -l|grep appname

Make sure Firejail has a profile you need or you build one first, check

cd /etc/firejail


Before we create a symbolic link, we may wish to first find the file executable name, navigate to your program execution folder

for Ubuntu / Fedora / CentOS

cd /usr/bin


Note the filename of the app you wish to sandbox. To create a symbolic link or symlink simply type:

ln -s /usr/bin/firejail /usr/local/bin/program-name

Thats it :)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.