aboutsummaryrefslogtreecommitdiffstats
path: root/etc/firejail.config
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2016-08-21 15:01:10 -0400
committerLibravatar netblue30 <netblue30@yahoo.com>2016-08-21 15:01:10 -0400
commite6ee65a48c1d17da1cd2058b1e61dc838513a49e (patch)
treee7c3522225a3baa19e016d18c44e7f5cf376dc50 /etc/firejail.config
parentrun time support to disable remounting of /proc and /sys (diff)
downloadfirejail-e6ee65a48c1d17da1cd2058b1e61dc838513a49e.tar.gz
firejail-e6ee65a48c1d17da1cd2058b1e61dc838513a49e.tar.zst
firejail-e6ee65a48c1d17da1cd2058b1e61dc838513a49e.zip
run time support to disable overlayfs
Diffstat (limited to 'etc/firejail.config')
-rw-r--r--etc/firejail.config8
1 files changed, 5 insertions, 3 deletions
diff --git a/etc/firejail.config b/etc/firejail.config
index 1b8d5f4e3..275bba8e2 100644
--- a/etc/firejail.config
+++ b/etc/firejail.config
@@ -3,9 +3,6 @@
3# Most features are enabled by default. Use 'yes' or 'no' as configuration 3# Most features are enabled by default. Use 'yes' or 'no' as configuration
4# values. 4# values.
5 5
6# Remount /proc and /sys inside the sandbox, default enabled.
7# remount-proc-sys yes
8
9# Enable or disable bind support, default enabled. 6# Enable or disable bind support, default enabled.
10# bind yes 7# bind yes
11 8
@@ -24,9 +21,14 @@
24# Enable or disable networking features, default enabled. 21# Enable or disable networking features, default enabled.
25# network yes 22# network yes
26 23
24# Enable or disable overlayfs features, default enabled.
25# overlayfs yes
26
27# Enable --quiet as default every time the sandbox is started. Default disabled. 27# Enable --quiet as default every time the sandbox is started. Default disabled.
28# quiet-by-default no 28# quiet-by-default no
29 29
30# Remount /proc and /sys inside the sandbox, default enabled.
31# remount-proc-sys yes
30 32
31# Enable or disable restricted network support, default disabled. If enabled, 33# Enable or disable restricted network support, default disabled. If enabled,
32# networking features should also be enabled (network yes). 34# networking features should also be enabled (network yes).