HN Hall of Fame Weekly email

Firejail – Sandbox Linux Applications

github.com Software & code Software projects Security & privacy Candidate
Screenshot of github.com captured 2026-07-20
Page preview · captured 2026-07-20

Resurfaced independently across 4 calendar years, with breakout response in 2 of them.

submissions
5
submitters
5
observed span
2019–2026
peak thread · 53 comments
214 pts
latest 20+ return · 2022-03-27
154 pts

Submission timeline

2007–2026

One slot for every year since HN launched. Height is that year's peak points; orange marks a 100+ point or 50+ comment breakout. Select a bar to open its strongest thread.

First comments on top threads

HN comment order

I have been using Firejail for a few years now and absolutely love it. It is now a central part of my setup and workflows. Here are two features I use regularly: - The "virtual home" specified with --private=/path/to/folder runs the app with the specified folder as a home folder. I use this for all the apps I sandbox to make sure my real home does not get polluted by tens of config files, cache, etc. Removing all traces of…

pythux·214-point thread·

My main issue with Firejail is that it still uses a SUID binary, compared to bwrap which has supported rootless operation for a while now. If you have to use SUID I think it's no better than using the same functionality in Docker or systemd, which are probably already on your system if you're a developer. Though I would love to hear if anyone has any other use cases where firejail really shines compared to the other similar tools to…

There’s been a steady drumbeat of credential stealing attacks lately so I’m hoping to get practical recommendations for how to deal with it. Obviously “just don’t install malicious code” isn’t a reliable defense.

The first top-level comment from each of the four biggest threads, in HN’s own order. Excerpts are shortened; open a comment for full context.

Breakout years
2

100+ points or 50+ comments

Total points
376

reference only — not used in Hall rules or ranking

Total comments
103

reference only — not used in Hall rules or ranking

Every submission

DateTitle as submittedByPointsComments
2019-12-04Firejail: Sandboxing Untrusted Linux Applicationsals010
2020-01-17Firejail: Sandboxing on Linuxzzbn0040
2020-11-10Firejail – Sandbox Linux ApplicationsFirst breakout · Best threadthushanfernando21448
2022-03-27Firejail: Linux namespaces and seccomp-bpf sandboxLatest 20+ point returnvarbhat15453
2026-05-20Firejailjanalsncm32