aboutsummaryrefslogtreecommitdiffstats
path: root/src/man/firejail-profile.txt
diff options
context:
space:
mode:
authorLibravatar rusty-snake <print_hello_world+Public@protonmail.com>2019-08-22 13:04:24 +0200
committerLibravatar rusty-snake <print_hello_world+Public@protonmail.com>2019-08-22 13:04:24 +0200
commit8dfe3eb5656e17af51d700038cb2bc29a9a53a0c (patch)
tree4b98edf23ce15da6c67ee928465773505bfcfac2 /src/man/firejail-profile.txt
parentEnable private-bin in transmission-daemon (diff)
downloadfirejail-8dfe3eb5656e17af51d700038cb2bc29a9a53a0c.tar.gz
firejail-8dfe3eb5656e17af51d700038cb2bc29a9a53a0c.tar.zst
firejail-8dfe3eb5656e17af51d700038cb2bc29a9a53a0c.zip
various fixes and improvements
- install contrib/syscalls.sh - add GitLab-CI status to README.md - read-only ${HOME}/.cargo/env - move blacklist ${HOME}/.cargo/registry, ${HOME}/.cargo/config to disable-programs - typo in man firejail firejail-profiles firecfg - better descriptions in man firejail-profiles - fixes in man firejail - template descriptions in firejail-profiles
Diffstat (limited to 'src/man/firejail-profile.txt')
-rw-r--r--src/man/firejail-profile.txt16
1 files changed, 11 insertions, 5 deletions
diff --git a/src/man/firejail-profile.txt b/src/man/firejail-profile.txt
index 74f99b538..3db8c782d 100644
--- a/src/man/firejail-profile.txt
+++ b/src/man/firejail-profile.txt
@@ -75,7 +75,13 @@ Child process initialized
75.RE 75.RE
76 76
77.SH Templates 77.SH Templates
78Templates for writing own profiles can be found in /usr/share/doc/firejail. 78In /usr/share/doc/firejail there are two templates to write new profiles.
79.RS
80profile.template - for regular profiles
81.br
82redirect_alias-profile.template - for aliasing/redirecting profiles
83.RE
84
79 85
80.SH Scripting 86.SH Scripting
81Scripting commands: 87Scripting commands:
@@ -144,7 +150,7 @@ Ignore command.
144 150
145Example: "ignore seccomp" 151Example: "ignore seccomp"
146.br 152.br
147Example: "ignore net ehh0" 153Example: "ignore net eth0"
148 154
149.TP 155.TP
150\fBquiet 156\fBquiet
@@ -154,10 +160,10 @@ Example: "quiet"
154 160
155.SH Filesystem 161.SH Filesystem
156These profile entries define a chroot filesystem built on top of the existing 162These profile entries define a chroot filesystem built on top of the existing
157host filesystem. Each line describes a file element that is removed from 163host filesystem. Each line describes a file/directory that is inaccessible
158the filesystem (\fBblacklist\fR), a read-only file or directory (\fBread-only\fR), 164(\fBblacklist\fR), a read-only file or directory (\fBread-only\fR),
159a tmpfs mounted on top of an existing directory (\fBtmpfs\fR), 165a tmpfs mounted on top of an existing directory (\fBtmpfs\fR),
160or mount-bind a directory or file on top of another directory or file (\fBbind\fR). 166or mount-bind a directory or file on top of another directory or file (\fBbind\fR).
161Use \fBprivate\fR to set private mode. 167Use \fBprivate\fR to set private mode.
162File globbing is supported, and PATH and HOME directories are searched. 168File globbing is supported, and PATH and HOME directories are searched.
163Examples: 169Examples: