Setup and configure Firejail
Switch branches/tags
Nothing to show
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
defaults
docs
meta
tasks
.gitignore
.travis.yml
CHANGES.rst
CONTRIBUTING.rst
COPYRIGHT
LICENSE
README.md

README.md

DebOps firejail

Travis CI test-suite Ansible Galaxy

Firejail is a SUID program that reduces the risk of security breaches by restricting the running environment of untrusted applications using Linux namespaces and seccomp-bpf.

This Ansible role allows you to setup and configure Firejail.

Features

  • Install Firejail from jessie-backports or other configured APT repositories. debops.apt can be used to enable Backports if needed.
  • Sandbox programs system wide by placing a symlink to firejail into the PATH so that firejail can wrap program invocations and sandbox the invoked program using security profiles that Firejail ships or that the system administrator defines.

Installation

This role requires at least Ansible v2.1.3. To install it, run:

ansible-galaxy install debops-contrib.firejail

Documentation

More information about debops-contrib.firejail can be found in the official debops-contrib.firejail documentation.

Contributing

Please note that this repository is not the upstream repository where changes should be contributed to. Head over to https://github.com/debops/debops where you can find the contents of this repo and where changes are welcome.

Are you using this as a standalone role without DebOps?

You may need to include missing roles from the DebOps common playbook into your playbook.

Try DebOps now for a complete solution to run your Debian-based infrastructure.

Authors and license

License: GPL-3.0


This role is part of DebOps Contrib. README generated by ansigenome.