BSD Ports

security/x11appjail 2.0.0 FreeBSD

Tool for creating, verifying, installing, and running AppJails

System
FreeBSD
Repository
FreeBSD ports
Maintainer
[email protected]
Port added
Last update
Commit
60c2161e2d
License
BSD3CLAUSE
Categories
security
Package size
36.6 KiB, 114.8 KiB installed

Description

x11appjail is a specialized tool for creating, verifying, installing, and running AppJails. An AppJail is a CLI, TUI or X11 application that runs inside a FreeBSD jail but is perceived by the end user as identical (or at least very similar) to an application running directly on the host system.

This tool makes extensive use of appjail(1) as its engine; however, unlike the latter, the primary user in x11appjail is neither root nor a privileged user, but rather an unprivileged user. The fundamental goal of this project is to grant the user limited access to the jail, restricted solely to the execution of a CLI, TUI or X11 application.

Install

Binary package:

pkg install x11appjail

From the ports tree:

cd /usr/ports/security/x11appjail/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	x11appjail>0:security/x11appjail

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest1.3.01.3.1---
FreeBSD:14:quarterly1.3.12.0.0n/a--
FreeBSD:15:latest1.3.12.0.0n/a--
FreeBSD:15:quarterly1.3.11.3.1n/an/an/a
FreeBSD:16:latest1.2.12.0.0n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependencies

As this port's Makefile names them.

Runtime 16

The full lists below include those, and their dependencies in turn.

Run dependencies 186

The first 100 are listed.

No port depends on this one.

Configuration

Options name: security_x11appjail

OptionDefaultDescription
BLAKE3onEnable support for Blake3
DBUSonInstall with xdg-dbus-proxy
Service scripts
none

Message after installing

To allow unprivileged users to run AppJails, add the following rule to
your doas.conf(5):

  permit nopass USER cmd /usr/local/libexec/x11appjail/map-exec

Replace USER with the user you want to allow to run AppJails. You can
also use a group for this, so that you do not have to edit your
doas.conf(5) file every time.

*VERY IMPORTANT*:

1. Do not set keepenv. Environment variables can affect the execution of
   the mentioned utility or the utilities it depends on. You do not need
   it, and you should not configure it.
2. In doas.conf(5), the last rules take precedence; therefore, add the
   previous rule on the last line.

   You can run the following command and confirm that the environment is
   not inherited:

     doas /usr/local/libexec/x11appjail/map-exec env

Files

Manual pages 2
  • x11appjail(1)
  • x11appjail-spec(5)
pkg-plist 31
  • bin/x11appjail
  • lib/x11appjail/common
  • libexec/x11appjail/appsiz
  • libexec/x11appjail/attr
  • libexec/x11appjail/destroy-jail
  • libexec/x11appjail/exec
  • libexec/x11appjail/login
  • libexec/x11appjail/map-exec
  • libexec/x11appjail/misc/simple-desktop-file-utils.sh
  • libexec/x11appjail/print-display
  • libexec/x11appjail/remove
  • libexec/x11appjail/run-cmd
  • libexec/x11appjail/sys-attr
  • libexec/x11appjail/service.d/Notification/agent
  • libexec/x11appjail/service.d/Notification/exec
  • libexec/x11appjail/service.d/Notification/setup
  • libexec/x11appjail/service.d/OpenURL/agent
  • libexec/x11appjail/service.d/OpenURL/exec
  • libexec/x11appjail/service.d/OpenURL/setup
  • libexec/x11appjail/transfer
  • libexec/x11appjail/veriexec
  • share/man/man1/x11appjail.1.gz
  • share/man/man5/x11appjail-spec.5.gz
  • share/x11appjail/appscript/APPSCRIPT
  • share/x11appjail/scaffold/Makejail
  • share/x11appjail/scaffold/X
  • share/x11appjail/scaffold/create
  • share/x11appjail/scaffold/install
  • share/x11appjail/scaffold/run
  • share/x11appjail/scaffold/template.conf
  • share/x11appjail/scaffold/uninstall
distinfo 1
FileSizeSHA256
DtxdF-x11appjail-v2.0.0_GH0.tar.gz4952588d320de4a521e1fc9065d50e1555d9ef48cb0bc6f18a3ca2004b4d76f0cc5e1

Commit history 8

DateCommitCreditsLog message
60c2161e2d Jesús Daniel Colmenares Oviedo security/x11appjail: Add missing runtime dependency for DBUS
MFH: 2026Q4
9d6f7a3133 Jesús Daniel Colmenares Oviedo security/x11appjail: Upgrade to 2.0.0
* Add DBUS option. ChangeLog: https://github.com/DtxdF/x11appjail/releases/tag/v2.0.0 MFH: 2026Q4
065036430e Jesús Daniel Colmenares Oviedo security/x11appjail: Update to 1.3.1
ChangeLog: https://github.com/DtxdF/x11appjail/releases/tag/v1.3.1 MFH: 2026Q4
42d0e15d3a Jesús Daniel Colmenares Oviedo security/x11appjail: Update to 1.3.0
* Remove EXAMPLES option (moved to https://github.com/AppJail-makejails): - https://github.com/AppJail-makejails/linux-brave - https://github.com/AppJail-makejails/badwolf - https://github.com/AppJail-makejails/evince - https://github.com/AppJail-makejails/chromium - https://github.com/AppJail-makejails/nanonote - https://github.com/AppJail-makejails/htop - https://github.com/AppJail-makejails/mpv - https://github.com/AppJail-makejails/firefox - https://github.com/AppJail-makejails/thunderbird - https://github.com/AppJail-makejails/telegram-desktop - https://github.com/AppJail-makejails/feh ChangeLog: https://github.com/DtxdF/x11appjail/releases/tag/v1.3.0 MFH: 2026Q4
d436a4a463 Jesús Daniel Colmenares Oviedo security/x11appjail: Update to 1.2.1
ChangeLog: https://github.com/DtxdF/x11appjail/releases/tag/v1.2.1 MFH: 2026Q4

The latest 5 of 8 in the history this site was built from.