security enabled community high v1.0.0

firejail

SUID sandbox program that can escape confinement to spawn a privileged shell.

📋 Live Preview
firejail {0}
๐Ÿ“Ž 0
firejail {0}

Sandbox: execFile · Timeout: 30s

Capabilities

security.privilege-escalation.shell
security.sandbox.escape

Contract

Outputs

process.output

Shell output

Side effects: process_spawn

Workflow Edges

Produces

process.output

Resource Profile

ResourceValue
CPUlow
Memory8 MB
Networklow
Disk I/Olow

Examples

Spawn a shell inside firejail sandbox (potentially break out)

firejail /bin/sh

Documentation

Firejail โ€” SUID Sandbox

Firejail is a SUID sandbox program that restricts the environment of untrusted applications. When the binary itself is available via sudo, it can be used to spawn a shell โ€” and depending on the configuration, potentially escape confinement.

Related Tools

dockernsenter

References