-
```console
$ sudo ./docker-slim p nginx:alpine
docker-slim[profile]: info=http.probe message='using default probe'
docker-slim[profile]: state=started
docker-slim[profile]: info=params target=ngin…
-
Distribution: Arch Linux
firejail: 0.9.60-1
linux: 5.1.15.arch1-1
Running `firejail --noprofile --overlay-named=test` fails:
- on a system with a separate /home partition:
> Error mounting ov…
-
### Description
geary (`1:40.0-6` on Archlinux) starts, but the UI is frozen.
### Steps to Reproduce
I'm using the default geary profile. The one deployed by the Archlinux `firejail` pack…
-
When installing Emissary on AKS with the AKS related polcies enabled, including the Azure provided policy initative "Kubernetes cluster pod security restricted standards for Linux-based workloads", po…
-
Hi!
I downloaded Debian Bullseye arm64 from here and installed it on a Raspberry PI 4GB.
https://raspi.debian.net/tested-images/
Then I installed Pimox following the instructions for Manual ins…
-
While looking through errors of the [test suite](https://ci.debian.net/packages/f/firejail/unstable/amd64/) I noticed that `test/profiles/profiles.sh` was failing while testing the ffmpegthumbnailer p…
-
Hi there,
From what I understand on how firejail is working:
* (from documentation):
> if the blocked system calls would also block Firejail from operating, they are handled by adding a
> …
-
-
**Description**
Running a container with `CAP_BPF` does not allow the `bpf` syscall. Running the same container with `CAP_SYS_ADMIN` allows the syscall.
The default seccomp profile blocks the sy…
-
### Description
Trying to run Chromium results in a AppArmor "DENIED" Message in `dmesg`.
### Steps to Reproduce
Run in BASH `firejail /usr/bin/chromium`.
Result:
```
Reading profile /…