diff options
author | rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2020-11-16 11:58:05 +0100 |
---|---|---|
committer | rusty-snake <41237666+rusty-snake@users.noreply.github.com> | 2020-11-16 11:58:38 +0100 |
commit | 58868dcaacead0a544b3ba1618167a034d2d90ad (patch) | |
tree | ec88703f349cd6899a58a66e4a584af0aeb38b2d | |
parent | add read-only items for ksh and mksh (diff) | |
download | firejail-58868dcaacead0a544b3ba1618167a034d2d90ad.tar.gz firejail-58868dcaacead0a544b3ba1618167a034d2d90ad.tar.zst firejail-58868dcaacead0a544b3ba1618167a034d2d90ad.zip |
document protocol=bluetooth
-rw-r--r-- | RELNOTES | 3 | ||||
-rw-r--r-- | src/man/firejail-profile.txt | 2 | ||||
-rw-r--r-- | src/man/firejail.txt | 2 |
3 files changed, 4 insertions, 3 deletions
@@ -1,6 +1,7 @@ | |||
1 | firejail (0.9.65) baseline; urgency=low | 1 | firejail (0.9.65) baseline; urgency=low |
2 | * allow --tmpfs inside $HOME for unprivileged users | 2 | * allow --tmpfs inside $HOME for unprivileged users |
3 | * --disable-usertmpfs compile time option | 3 | * --disable-usertmpfs compile time option |
4 | * allow AF_BLUETOOTH via --protocol=bluetooth | ||
4 | * new profiles: spectacle, chromium-browser-privacy | 5 | * new profiles: spectacle, chromium-browser-privacy |
5 | -- netblue30 <netblue30@yahoo.com> Wed, 21 Oct 2020 09:00:00 -0500 | 6 | -- netblue30 <netblue30@yahoo.com> Wed, 21 Oct 2020 09:00:00 -0500 |
6 | 7 | ||
diff --git a/src/man/firejail-profile.txt b/src/man/firejail-profile.txt index ef7dccbfb..9524254c1 100644 --- a/src/man/firejail-profile.txt +++ b/src/man/firejail-profile.txt | |||
@@ -412,7 +412,7 @@ There is no root account (uid 0) defined in the namespace. | |||
412 | \fBprotocol protocol1,protocol2,protocol3 | 412 | \fBprotocol protocol1,protocol2,protocol3 |
413 | Enable protocol filter. The filter is based on seccomp and checks the | 413 | Enable protocol filter. The filter is based on seccomp and checks the |
414 | first argument to socket system call. Recognized values: \fBunix\fR, | 414 | first argument to socket system call. Recognized values: \fBunix\fR, |
415 | \fBinet\fR, \fBinet6\fR, \fBnetlink\fR and \fBpacket\fR. | 415 | \fBinet\fR, \fBinet6\fR, \fBnetlink\fR, \fBpacket\fR and \fBbluetooth\fR. |
416 | .TP | 416 | .TP |
417 | \fBseccomp | 417 | \fBseccomp |
418 | Enable seccomp filter and blacklist the syscalls in the default list. See man 1 firejail for more details. | 418 | Enable seccomp filter and blacklist the syscalls in the default list. See man 1 firejail for more details. |
diff --git a/src/man/firejail.txt b/src/man/firejail.txt index 219eba10e..8c73962fb 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt | |||
@@ -2003,7 +2003,7 @@ $ firejail \-\-profile.print=browser | |||
2003 | .TP | 2003 | .TP |
2004 | \fB\-\-protocol=protocol,protocol,protocol | 2004 | \fB\-\-protocol=protocol,protocol,protocol |
2005 | Enable protocol filter. The filter is based on seccomp and checks the first argument to socket system call. | 2005 | Enable protocol filter. The filter is based on seccomp and checks the first argument to socket system call. |
2006 | Recognized values: unix, inet, inet6, netlink and packet. This option is not supported for i386 architecture. | 2006 | Recognized values: unix, inet, inet6, netlink, packet and bluetooth. This option is not supported for i386 architecture. |
2007 | .br | 2007 | .br |
2008 | 2008 | ||
2009 | .br | 2009 | .br |