diff options
author | netblue30 <netblue30@yahoo.com> | 2016-02-26 20:13:54 -0500 |
---|---|---|
committer | netblue30 <netblue30@yahoo.com> | 2016-02-26 20:13:54 -0500 |
commit | 460bb2abbe70834d65e9be04edbb2f8e05249111 (patch) | |
tree | 1695b02b3a52e221eb732294fc15d07c7d2139b6 /README.md | |
parent | x11 support (diff) | |
download | firejail-460bb2abbe70834d65e9be04edbb2f8e05249111.tar.gz firejail-460bb2abbe70834d65e9be04edbb2f8e05249111.tar.zst firejail-460bb2abbe70834d65e9be04edbb2f8e05249111.zip |
x11 support
Diffstat (limited to 'README.md')
-rw-r--r-- | README.md | 12 |
1 files changed, 12 insertions, 0 deletions
@@ -39,6 +39,18 @@ FAQ: https://firejail.wordpress.com/support/frequently-asked-questions/ | |||
39 | 39 | ||
40 | ````` | 40 | ````` |
41 | 41 | ||
42 | ## X11 sandboxing support | ||
43 | |||
44 | X11 support is built around Xpra (http://xpra.org/). | ||
45 | So far I've seen it working on Debian 7 and 8, and Ubuntu 14.04. If you manage to run it on another | ||
46 | distribution, please let me know. Example: | ||
47 | ````` | ||
48 | $ firejail --x11 --net=eth0 firefox | ||
49 | ````` | ||
50 | --x11 starts the server, --net is required in order to remove the main X11 server socket from the sandbox. | ||
51 | More information here: https://firejail.wordpress.com/documentation-2/x11-guide/ | ||
52 | |||
53 | |||
42 | ## Default seccomp filter update | 54 | ## Default seccomp filter update |
43 | 55 | ||
44 | Currently 50 syscalls are blacklisted by default, out of a total of 318 calls (AMD64, Debian Jessie). | 56 | Currently 50 syscalls are blacklisted by default, out of a total of 318 calls (AMD64, Debian Jessie). |