---
title: "Hardening with Firejail, Landlock, and bubblewrap"
url: https://daily.dev/posts/hardening-with-firejail-landlock-and-bubblewrap-kmr8wfkw4
source_url: https://advancedweb.hu/shorts/hardening-with-firejail-landlock-and-bubblewrap/
type: article
source: "Advanced Web Machinery"
published: 2025-12-02T20:35:19.236Z
updated: 2026-03-15T04:02:46.642Z
tags: ["linux", "security"]
reading_time: 2
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Hardening with Firejail, Landlock, and bubblewrap

**[Advanced Web Machinery](https://daily.dev/sources/advancedweb)** · 2 min read · 0 upvotes · 0 comments

## Summary

A developer explores three Linux sandboxing tools for securing applications on their laptop. Firejail offers filesystem and network restrictions but runs with elevated privileges (setuid root), creating potential security risks. Landlock provides unprivileged sandboxing with network restrictions but has coarse-grained filesystem controls that allow access to entire directory trees. Bubblewrap emerges as a promising solution combining unprivileged operation with fine-grained filesystem layering, though migrating configurations requires effort.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://advancedweb.hu/shorts/hardening-with-firejail-landlock-and-bubblewrap/>

## Similar posts on daily.dev

- [Easy Sandboxing on Linux with Bubblewrap](https://daily.dev/posts/easy-sandboxing-on-linux-with-bubblewrap-b5wpu6gga) · Lobsters · 0 upvotes · 0 comments
- [prizrak.me blog](https://daily.dev/posts/prizrak-me-blog-mgojl7ak4) · Hacker News · 2 upvotes · 0 comments
- [Simple sandboxing for shell scripts](https://daily.dev/posts/simple-sandboxing-for-shell-scripts-nkuxzlasm) · Lobsters · 0 upvotes · 0 comments

---

Tags: [#linux](https://daily.dev/tags/linux), [#security](https://daily.dev/tags/security)

[View this post on daily.dev](https://daily.dev/posts/hardening-with-firejail-landlock-and-bubblewrap-kmr8wfkw4)