diff options
author | netblue30 <netblue30@yahoo.com> | 2017-06-29 11:20:22 -0400 |
---|---|---|
committer | netblue30 <netblue30@yahoo.com> | 2017-06-29 11:20:22 -0400 |
commit | 2aee5f9018e8d3758c7b2f93b8dbc32811d8a159 (patch) | |
tree | 637283f877774854e9c6b6b27f23e400de449854 /README.md | |
parent | geary profile (diff) | |
download | firejail-2aee5f9018e8d3758c7b2f93b8dbc32811d8a159.tar.gz firejail-2aee5f9018e8d3758c7b2f93b8dbc32811d8a159.tar.zst firejail-2aee5f9018e8d3758c7b2f93b8dbc32811d8a159.zip |
readme
Diffstat (limited to 'README.md')
-rw-r--r-- | README.md | 50 |
1 files changed, 38 insertions, 12 deletions
@@ -13,15 +13,7 @@ such as Mozilla Firefox, Chromium, VLC, Transmission etc. | |||
13 | 13 | ||
14 | The sandbox is lightweight, the overhead is low. There are no complicated configuration files to edit, | 14 | The sandbox is lightweight, the overhead is low. There are no complicated configuration files to edit, |
15 | no socket connections open, no daemons running in the background. All security features are | 15 | no socket connections open, no daemons running in the background. All security features are |
16 | implemented directly in Linux kernel and available on any Linux computer. To start the sandbox, | 16 | implemented directly in Linux kernel and available on any Linux computer. |
17 | prefix your command with “firejail”: | ||
18 | |||
19 | ````` | ||
20 | $ firejail firefox # starting Mozilla Firefox | ||
21 | $ firejail transmission-gtk # starting Transmission BitTorrent | ||
22 | $ firejail vlc # starting VideoLAN Client | ||
23 | $ sudo firejail /etc/init.d/nginx start | ||
24 | ````` | ||
25 | 17 | ||
26 | [![About Firejail](video.png)](http://www.youtube.com/watch?v=Yk1HVPOeoTc) | 18 | [![About Firejail](video.png)](http://www.youtube.com/watch?v=Yk1HVPOeoTc) |
27 | 19 | ||
@@ -50,15 +42,49 @@ On Debian/Ubuntu you will need to install git and a compiler: | |||
50 | $ sudo apt-get install git build-essential | 42 | $ sudo apt-get install git build-essential |
51 | ````` | 43 | ````` |
52 | 44 | ||
53 | ## User submitted profile repositories | ||
54 | 45 | ||
55 | If you keep your Firejail profiles in a public repository, please give us a link: | 46 | ## Running the sandbox |
47 | |||
48 | To start the sandbox, prefix your command with “firejail”: | ||
49 | |||
50 | ````` | ||
51 | $ firejail firefox # starting Mozilla Firefox | ||
52 | $ firejail transmission-gtk # starting Transmission BitTorrent | ||
53 | $ firejail vlc # starting VideoLAN Client | ||
54 | $ sudo firejail /etc/init.d/nginx start | ||
55 | ````` | ||
56 | |||
57 | ## Desktop integration | ||
58 | |||
59 | Integrate your sandbox into your desktop by running the following two commands: | ||
60 | ````` | ||
61 | $ firecfg --fix-sound | ||
62 | $ sudo firecfg | ||
63 | ````` | ||
64 | |||
65 | The first command solves some shared memory/PID namespace bugs in PulseAudio software prior to version 9. | ||
66 | The second command integrates Firejail into your desktop. You would need to logout and login back to apply | ||
67 | PulseAudio changes. | ||
68 | |||
69 | Start your programs the way you are used to: desktop manager menus, file manager, desktop launchers. | ||
70 | The integration applies to any program supported by default by Firejail. There are about 250 default applications | ||
71 | in current Firejail version, and the number goes up with every new release. | ||
72 | We keep the application list in [/usr/lib/firejail/firecfg.config](https://github.com/netblue30/firejail/blob/master/src/firecfg/firecfg.config) file. | ||
73 | ````` | ||
74 | |||
75 | ````` | ||
76 | ## Security profiles | ||
77 | |||
78 | Most Firejail command line options can be passed to the sandbox using profile files. | ||
79 | You can find the profiles for all supported applications in [/etc/firejail](https://github.com/netblue30/firejail/tree/master/etc) directory. | ||
80 | |||
81 | If you keep additional Firejail security profiles in a public repository, please give us a link: | ||
56 | 82 | ||
57 | * https://github.com/chiraag-nataraj/firejail-profiles | 83 | * https://github.com/chiraag-nataraj/firejail-profiles |
58 | 84 | ||
59 | * https://github.com/triceratops1/fe | 85 | * https://github.com/triceratops1/fe |
60 | 86 | ||
61 | Use this issue to request new profiles: https://github.com/netblue30/firejail/issues/1139 | 87 | Use this issue to request new profiles: #1139 |
62 | ````` | 88 | ````` |
63 | 89 | ||
64 | ````` | 90 | ````` |