diff options
| author |  glitsj16 <glitsj16@users.noreply.github.com> | 2020-04-08 18:06:35 +0000 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2020-04-08 18:06:35 +0000 |
| commit | 41d4e3d80b6e90807bcee8bdfc0fe5865ea8c890 (patch) | |
| tree | cb1358e7fb1d2cb5006bb800935b833bb48ba0b0 | |
| parent | fix typos in dbus-{system,user}.talk [usage.c] (diff) | |
| download | firejail-41d4e3d80b6e90807bcee8bdfc0fe5865ea8c890.tar.gz firejail-41d4e3d80b6e90807bcee8bdfc0fe5865ea8c890.tar.zst firejail-41d4e3d80b6e90807bcee8bdfc0fe5865ea8c890.zip | |
add example for overriding individiual DBus filter to firejail-profile.txt
See discussion in https://github.com/netblue30/firejail/pull/3326.
| -rw-r--r-- | src/man/firejail-profile.txt | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/src/man/firejail-profile.txt b/src/man/firejail-profile.txt index adde9a27f..2a4bb9c0b 100644 --- a/src/man/firejail-profile.txt +++ b/src/man/firejail-profile.txt | |||
| @@ -496,6 +496,22 @@ Allow the application to talk to the name org.freedesktop.Notifications on the s | |||
| 496 | .TP | 496 | .TP |
| 497 | \fBnodbus \fR(deprecated) | 497 | \fBnodbus \fR(deprecated) |
| 498 | Disable D-Bus access (both system and session buses). Equivalent to dbus-system none and dbus-user none. | 498 | Disable D-Bus access (both system and session buses). Equivalent to dbus-system none and dbus-user none. |
| 499 | .br | ||
| 500 | |||
| 501 | .br | ||
| 502 | Individual filters can be overridden via the \-\-ignore command. Supposing a profile has | ||
| 503 | |||
| 504 | [...] | ||
| 505 | dbus-user filter | ||
| 506 | dbus-user.own org.mozilla.firefox.* | ||
| 507 | dbus-user.talk org.freedesktop.Notifications | ||
| 508 | dbus-system none | ||
| 509 | [...] | ||
| 510 | |||
| 511 | and the user wants to disable notifications, this can be achieved by putting the below in a local override file: | ||
| 512 | [...] | ||
| 513 | ignore dbus-user.talk org.freedesktop.Notifications | ||
| 514 | [...] | ||
| 499 | 515 | ||
| 500 | .SH Resource limits, CPU affinity, Control Groups | 516 | .SH Resource limits, CPU affinity, Control Groups |
| 501 | These profile entries define the limits on system resources (rlimits) for the processes inside the sandbox. | 517 | These profile entries define the limits on system resources (rlimits) for the processes inside the sandbox. |