whitelist support in /etc/firejail/firejail.config

1 files changed, 9 insertions, 6 deletions

diff --git a/etc/firejail.config b/etc/firejail.config
index 55d2faa9f..4fcaee213 100644
--- a/etc/firejail.config
+++ b/etc/firejail.config
@@ -12,6 +12,12 @@
 # Enable or disable file transfer support, default enabled.
 # file-transfer yes
 
+# Force use of nonewprivs.  This mitigates the possibility of
+# a user abusing firejail's features to trick a privileged (suid
+# or file capabilities) process into loading code or configuration
+# that is partially under their control.  Default disabled
+# force-nonewprivs no
+
 # Enable or disable networking features, default enabled.
 # network yes
 
@@ -27,15 +33,12 @@
 # Enable or disable user namespace support, default enabled.
 # userns yes
 
+# Enable or disable whitelisting support, default enabled
+# whitelist yes
+
 # Enable or disable X11 sandboxing support, default enabled.
 # x11 yes
 
-# Force use of nonewprivs.  This mitigates the possibility of
-# a user abusing firejail's features to trick a privileged (suid
-# or file capabilities) process into loading code or configuration
-# that is partially under their control.  Default disabled
-# force-nonewprivs no
-
 # Screen size for --x11=xephyr, default 800x600. Run /usr/bin/xrandr for
 # a full list of resolutions available on your specific setup.
 # xephyr-screen 640x480