diff options
| author |  netblue30 <netblue30@yahoo.com> | 2016-02-26 20:13:54 -0500 |
|---|---|---|
| committer | netblue30 <netblue30@yahoo.com> | 2016-02-26 20:13:54 -0500 |
| commit | 460bb2abbe70834d65e9be04edbb2f8e05249111 (patch) | |
| tree | 1695b02b3a52e221eb732294fc15d07c7d2139b6 /README.md | |
| parent | x11 support (diff) | |
| download | firejail-460bb2abbe70834d65e9be04edbb2f8e05249111.tar.gz firejail-460bb2abbe70834d65e9be04edbb2f8e05249111.tar.zst firejail-460bb2abbe70834d65e9be04edbb2f8e05249111.zip | |
x11 support
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 12 |
1 files changed, 12 insertions, 0 deletions
| @@ -39,6 +39,18 @@ FAQ: https://firejail.wordpress.com/support/frequently-asked-questions/ | |||
| 39 | 39 | ||
| 40 | ````` | 40 | ````` |
| 41 | 41 | ||
| 42 | ## X11 sandboxing support | ||
| 43 | |||
| 44 | X11 support is built around Xpra (http://xpra.org/). | ||
| 45 | So far I've seen it working on Debian 7 and 8, and Ubuntu 14.04. If you manage to run it on another | ||
| 46 | distribution, please let me know. Example: | ||
| 47 | ````` | ||
| 48 | $ firejail --x11 --net=eth0 firefox | ||
| 49 | ````` | ||
| 50 | --x11 starts the server, --net is required in order to remove the main X11 server socket from the sandbox. | ||
| 51 | More information here: https://firejail.wordpress.com/documentation-2/x11-guide/ | ||
| 52 | |||
| 53 | |||
| 42 | ## Default seccomp filter update | 54 | ## Default seccomp filter update |
| 43 | 55 | ||
| 44 | Currently 50 syscalls are blacklisted by default, out of a total of 318 calls (AMD64, Debian Jessie). | 56 | Currently 50 syscalls are blacklisted by default, out of a total of 318 calls (AMD64, Debian Jessie). |