FIREJAIL-USERS(5)

📦
version 0.9.82.2 · 10 versions
, in arch rolling

💖 firejail.users — the VIP list, bestie 💖

okay so this is the firejail.users(5) man page from the firejail fam, and it's literally the guest list for who gets to run firejail's SUID executable. no cap, it's short but it MATTERS.

✨ NAME ✨

firejail.users — the Firejail user access database 👑

🎀 DESCRIPTION 🎀

/etc/firejail/firejail.users is the file that lists every user who's allowed to run the firejail SUID executable. it's giving velvet rope energy fr.

  • root is allowed by default — obviously, main character privileges 💅
  • the user nobody is never allowed. sorry bestie, not you 🙈

if a user isn't allowed to start the sandbox, Firejail will try to run the program without sandboxing it 😭 (yes really — no sandbox, just vibes).

but wait — if the file isn't present on the system at all? then everybody's allowed to use the sandbox. no file, no rules, we all slay 🦋

Example:

$ cat /etc/firejail/firejail.users
dustin
lucas
mike
eleven

see that? iconic. that's the whitelist right there ✨

to add or remove users from the list, just open it in a text editor — you're a big kid, you got this 💪. you can also use the firecfg --add-users command. Example:

$ sudo firecfg --add-users dustin lucas mike eleven

and by default, just running firecfg creates the file and adds the current user to the list. Example:

$ sudo firecfg

See man 1 firecfg for details. 👈 read it, bestie, it's worth it.

🌈 ALTERNATIVE SOLUTION 🌈

okay so there's another way to restrict who gets to touch the firejail executable — you can create a special firejail user group and let only members of that group run the sandbox. group chat but make it permissions 🫶

# addgroup --system firejail
# chown root:firejail /usr/bin/firejail
# chmod 4750 /usr/bin/firejail

that 4750 is doing a LOT of heavy lifting btw — setuid bit plus owner+group only. lowkey gorgeous 💜

📁 FILES 📁

  • /etc/firejail/firejail.users

that's it. one file. she's simple, she's powerful 💅

📜 LICENSE 📜

Firejail is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. 🥳

Homepage: https://firejail.wordpress.com

👀 SEE ALSO 👀

go read them, iykyk 📚

quick vibe check reminder: if this file is missing, everyone gets in. if it's there, only the names on the list (plus root) get past the rope, and nobody never does. periodt. 💀

mwah 💖 that's the whole page — version 0.9.82.2, dated Nov 2026, brought to you by the firejail.users man page. stay sandboxed, bestie 🧚✨

📦 where this page comes from