firejail | Linux namespaces and seccomp-bpf sandbox

by netblue30 C Version: 0.9.72 License: GPL-2.0

X-Ray Key Features Code Snippets Community Discussions(3)Vulnerabilities Install Support

kandi X-RAY | firejail Summary

firejail is a C library. firejail has no bugs, it has a Strong Copyleft License and it has medium support. However firejail has 4 vulnerabilities. You can download it from GitHub.

Firejail is a SUID sandbox program that reduces the risk of security breaches by restricting the running environment of untrusted applications using Linux namespaces, seccomp-bpf and Linux capabilities. It allows a process and all its descendants to have their own private view of the globally shared kernel resources, such as the network stack, process table, mount table. Firejail can work in a SELinux or AppArmor environment, and it is integrated with Linux Control Groups. Written in C with virtually no dependencies, the software runs on any Linux computer with a 3.x kernel version or newer. It can sandbox any type of processes: servers, graphical applications, and even user login sessions. The software includes sandbox profiles for a number of more common Linux programs, such as Mozilla Firefox, Chromium, VLC, Transmission etc. The sandbox is lightweight, the overhead is low. There are no complicated configuration files to edit, no socket connections open, no daemons running in the background. All security features are implemented directly in Linux kernel and available on any Linux computer. Download and Installation: Backup Video Channel:

Support

Quality

Security

License

Reuse

Support

firejail has a medium active ecosystem.

It has 4922 star(s) with 522 fork(s). There are 99 watchers for this library.

It had no major release in the last 12 months.

There are 380 open issues and 2731 have been closed. On average issues are closed in 75 days. There are 26 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of firejail is 0.9.72

Quality

firejail has 0 bugs and 0 code smells.

Security

firejail has 4 vulnerability issues reported (0 critical, 4 high, 0 medium, 0 low).

firejail code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

firejail is licensed under the GPL-2.0 License. This license is Strong Copyleft.

Strong Copyleft licenses enforce sharing, and you can use them when creating open source projects.

Reuse

firejail releases are available to install and integrate.

Installation instructions are not available. Examples and code snippets are available.

It has 525 lines of code, 25 functions and 38 files.

It has low code complexity. Code complexity directly impacts maintainability of the code.

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of firejail

Get all kandi verified functions for this library.

firejail Key Features

No Key Features are available at this moment for firejail.

firejail Examples and Code Snippets

No Code Snippets are available at this moment for firejail.

Community Discussions

Trending Discussions on firejail

Alias executes code instead of creating alias

STDOUT of nested commands in Bash

Javascript malware. How to study a ciphered function?

QUESTION

Alias executes code instead of creating alias

Asked 2019-Sep-17 at 13:55

In my ~/.bashrc file I defined the following alias: alias bwapp=service apache2 start;service mysql start;firefox http://localhost/bWAPP/bWAPP/portal.php

Then I restarted my computer and lauched terminal with the expectation of being able to run bwapp and lauch the portal, instead I was greeted with:

...

ANSWER

Answered 2019-Sep-17 at 13:55

Aliases must be quoted if they contain spaces, semicolons, pipes, etc, e.g:

Source https://stackoverflow.com/questions/57964954

QUESTION

STDOUT of nested commands in Bash

Asked 2017-Oct-14 at 15:30

Quite new to bash - I'm trying to store the output of my /usr/bin/time command into the TIME_INFO variable, which works with the below setup... however I would also like to be able to store the output of some of the other nested commands (such as /usr/local/bin/firejail or ./program) to other variables. Currently if there is a runtime exception in ./program it'll also go to the TIME_INFO variable.

...

ANSWER

Answered 2017-Oct-14 at 15:30

One way to do this is to inject a shell in the call chain and make it responsible for modifying stderr for its subprocesses:

Source https://stackoverflow.com/questions/46745979

QUESTION

Javascript malware. How to study a ciphered function?

Asked 2017-Jan-06 at 19:04

I have received an fake e-mail linking a website, ---DANGER--- kadiogluhotel.com/437019344HKFAHDzE9ykByni6Qd2TQSfkSYy2z7= Q7FftdKRHHaY8y96R6H668tf8KaZ69ttKzhyRRayafkHeaDY79Q38887G9TD9aYKA66dH6/TmFu= ZG8=3D/KaNTmFuZG8=3D/ ---DANGER--- that tries to download a zip file only if your browser user-agent is setted to some Windows configuration. This zip file contains a little js file and copy himself into the new folder.

I have tried to study the code but, really, I have been interested in javascript only since a few months. I need some help.

I have tried to execute the code in the chrome console over a debian virtual machine protected by firejail, but I have not been able to extract in plain text the returned function, "wxmvg",that is doing the work. The virus payload seems to be unable to run into linux, or I have not been able to detect it.

What steps should I take to decipher the function?

Thank you!

The code looks like:

--------WARNING MALWARE---------------------------

...

ANSWER

Answered 2017-Jan-06 at 19:04

If you change the eval call to console.log it will print the code in the console instead of executing it.

Once you have the code you can run it thru a beautifier to make it readable, and you'll get something like this...

Source https://stackoverflow.com/questions/41512319

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install firejail

You can download it from GitHub.

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: