sys-apps/firejail has a new upstream release (version 0.9.40) that needs to be added to the Gentoo ebuilds. See https://firejail.wordpress.com/ Quote from the "News" about the release: This release includes Grsecurity support, protocols, cup cores, sandbox name and X11 sandboxing support in the stats section, and a number of updates and bug fixes. A file manager that allows the user to browse the filesystem inside the sandbox is also included in this release.