Note: The RELNOTES file was updated on January 3, 2026; the code archives below preserve the previous RELNOTES version.

firejail (0.9.78) baseline; urgency=low

• feature: add arg-max-count / arg-max-len to firejail.config (#4633 #6878)
• feature: add env-max-count / env-max-len to firejail.config (#3678 #6951)
• feature: add --xephyr-extra-params= command (#6952)
• feature: replace bubblewrap (bwrap) in the sandbox with a dummy program (fbwrap) to work around issues with glycin 2.0.0 via gdk-pixbuf2 and add --allow-bwrap command to force the use of the real bwrap (#6906 #7009)
• modif: firemon: improve debug message code (#6856)
• modif: rlimit: allow uppercase suffixes (#6890)
• modif: rlimit: use uppercase suffixes in the code/docs (#6891)
• modif: rlimit: improve error messages (#6893)
• modif: update and add syscalls for several architectures (#6956 #6961)
• modif: check for --version during early init (#6972)
• removal: --disable-globalcfg configure option (#6984)
• removal: overlayfs support/--overlay commands (#6994)
• removal: Intrusion Detection System (IDS)/fids (#6995)
• bugfix: remove /usr/share + "runner:root" CI workaround (#6844)
• bugfix: firemon: fix inconsistent debug message format (#6854)
• bugfix: fix potential infinite loop in checkcfg (-fanalyzer) (#6859)
• bugfix: fnettrace-icmp: fix uninitialized vars (cppcheck) (#6869)
• bugfix: firemon: avoid cmd double-free in procevent_monitor (#6792 #6846)
• bugfix: firemon: fix potential memory leak in procevent_monitor (#6872)
• bugfix: firecfg: fix parsing filenames with multiple ".desktop" (#6865 #6871)
• bugfix: fix French translation for ${PICTURES} macro (#6942)
• bugfix: add missing macros in profile.template (#6948)
• bugfix: check for --quiet/--debug earlier during init (#6969)
• bugfix: disable apparmor if --allow-debuggers (#6882)
• bugfix: firecfg: skip snap-packaged programs to avoid breaking them on Ubuntu desktop (#7008)
• build: cppcheck: ignore src/lib/syscalls.c (#6868)
• build: cppcheck: use --check-level=exhaustive (#6877)
• build: add script to generate syscall headers (#6960 #6990)
• build: add sort-profiles target for sort.py (#7004)
• tests: rlimit: add missing tests for rlimit-as / rlimit-cpu (#6895)
• tests: man: fix timeout error (#6949)
• tests: man: disable test due to timeout (#6955)
• tests: fix test-appimage on Arch and Debian 13 (#7007)
• ci: allow new github domain for codeql download (#6845)
• ci: standardize "apt-get install" step name (#6862)
• ci: speed-up main build & add build-gcc (#6864)
• ci: cppcheck: upgrade ubuntu-22.04 to ubuntu-24.04 (#6874)
• ci: codespell: upgrade ubuntu-22.04 to ubuntu-24.04 (#6873)
• ci: codeql-cpp: print config.log if configure fails (#7003)
• docs: man: improve strace usage and add refs (#6851)
• docs: add debian/ubuntu links to README.md (#6850)
• docs: github: clarify how to attach logs (#6858)
• docs: rlimit: improve text and use base-2 units (#6894)
• docs: man: clarify what ipc-namespace affects (#6930)
• docs: improve build/install commands (#6962)
• docs: add distribution-specific build/install instructions (#6964)
• docs: clarify that only latest and dev versions are supported (#6965)
• docs: always use full path to program in examples (#6963)
• profiles: thunderbird: fix ignoring wruc (#6839 #6852)
• profiles: wine: disable noinput so gamepads work (#6866 #6867)
• profiles: qutebrowser: whitelist /usr/share/pdf.js (#6875)
• profiles: firefox-common: add a comment about mpris (#6876)
• profiles: qutebrowser: add comment about qute-pass support (#6879)
• profiles: add missing mailcap entries (#6883 #6884)
• profiles: organize blacklist sections as per profile.template (#6885)
• profiles: godot: allow ~/.local/share/Trash (#6904)
• profiles: wusc: add /usr/share/glycin-loaders (#6907)
• profiles: wusc: add /usr/share/gtk-4.0 (#6909)
• profiles: mullvad-browser: allow readlink and realpath (#6923)
• profiles: blink-common-hardened: disable noroot to fix saving files (#6920)
• profiles: steam: allow ~/.local/share/doublefine (#6937)
• profiles: wusc: add /usr/share/gtksourceview-5 (#6947)
• profiles: ssh: add ${RUNUSER}/openssh_agent socket path (#6975)
• profiles: brave: add org.mpris.MediaPlayer2.brave.* (#6980)
• profiles: hashcat: fix runtime errors (#6364 #6888)
• new profile: ne (text editor) (ae22e5610)
• new profile: trivalent (#6900)
• new profile: openra (#7005)
• new profile: gzdoom, lzdoom, uzdoom (#7010)
• new profile: quakespasm (#7014) -- netblue30 netblue30@yahoo.com Sat, 3 Jan 2026 11:00:00 -0500