diff options
author | 2021-05-12 15:59:31 -0400 | |
---|---|---|
committer | 2021-05-12 15:59:31 -0400 | |
commit | 13e699fe26cc0eda1d7cd1f214d2909e08a1dc58 (patch) | |
tree | d45983d62b3286f10391c062fa7df7c68ca66986 /src/man/firejail-profile.txt | |
parent | Update dino.profile (diff) | |
download | firejail-13e699fe26cc0eda1d7cd1f214d2909e08a1dc58.tar.gz firejail-13e699fe26cc0eda1d7cd1f214d2909e08a1dc58.tar.zst firejail-13e699fe26cc0eda1d7cd1f214d2909e08a1dc58.zip |
more --build
Diffstat (limited to 'src/man/firejail-profile.txt')
-rw-r--r-- | src/man/firejail-profile.txt | 90 |
1 files changed, 85 insertions, 5 deletions
diff --git a/src/man/firejail-profile.txt b/src/man/firejail-profile.txt index 9d11add06..9d59328f5 100644 --- a/src/man/firejail-profile.txt +++ b/src/man/firejail-profile.txt | |||
@@ -1,12 +1,78 @@ | |||
1 | .TH FIREJAIL-PROFILE 5 "MONTH YEAR" "VERSION" "firejail profiles man page" | 1 | .TH FIREJAIL-PROFILE 5 "MONTH YEAR" "VERSION" "firejail profiles man page" |
2 | .SH NAME | 2 | .SH NAME |
3 | profile \- Security profile file syntax for Firejail | 3 | profile \- Security profile file syntax, and information about building new application profiles. |
4 | 4 | ||
5 | .SH USAGE | 5 | .SH SYNOPSIS |
6 | |||
7 | Using a specific profile: | ||
8 | .PP | ||
9 | .RS | ||
10 | .TP | ||
11 | \fBfirejail \-\-profile=filename.profile | ||
12 | .br | ||
13 | |||
14 | .br | ||
15 | Example: | ||
16 | .br | ||
17 | $ firejail --profile=/etc/firejail/kdenlive.profile --appimage kdenlive.appimage | ||
18 | .br | ||
19 | |||
20 | .br | ||
21 | .TP | ||
22 | \fBfirejail \-\-profile=profile_name | ||
23 | .br | ||
24 | |||
25 | .br | ||
26 | Example: | ||
27 | .br | ||
28 | $ firejail --profile=kdenlive --appimage kdenlive.appimage | ||
29 | .br | ||
30 | |||
31 | .br | ||
32 | .RE | ||
33 | .PP | ||
34 | |||
35 | |||
36 | |||
37 | Building a profile manually: | ||
38 | .PP | ||
39 | .RS | ||
40 | Start with the template in /usr/share/doc/firejail/profile.template and modify it in a text editor. | ||
41 | To integrate the program in your desktop environment copy the profile file in ~/.config/firejail | ||
42 | directory and run "sudo firecfg". | ||
43 | .RE | ||
44 | .PP | ||
45 | |||
46 | Aliases and redirections: | ||
47 | .PP | ||
48 | .RS | ||
49 | In some cases the same profile can be used for several applications. | ||
50 | One such example is LibreOffice. | ||
51 | Build a regular profile for the main application, and for the rest use | ||
52 | /usr/share/doc/firejail/redirect_alias-profile.template. | ||
53 | .RE | ||
54 | .PP | ||
55 | |||
56 | Running the profile builder: | ||
57 | .PP | ||
58 | .RS | ||
6 | .TP | 59 | .TP |
7 | firejail \-\-profile=filename.profile | 60 | \fBfirejail \-\-build=appname.profile appname |
61 | .br | ||
62 | |||
63 | .br | ||
64 | Example: | ||
65 | .br | ||
66 | $ firejail --build=blobby.profile blobby | ||
67 | .br | ||
68 | |||
69 | .br | ||
70 | Run the program in "firejail \-\-build" and try to exercise as many program features as possible. | ||
71 | The profile is extracted and saved in the current directory. Open it in a text editor and add or remove | ||
72 | sandboxing options as necessary. Test again after modifying the profile. To integrate the program | ||
73 | in your desktop environment copy the profile file in ~/.config/firejail directory and run "sudo firecfg". | ||
8 | .RE | 74 | .RE |
9 | firejail \-\-profile=profile_name | 75 | .PP |
10 | 76 | ||
11 | .SH DESCRIPTION | 77 | .SH DESCRIPTION |
12 | Several command line options can be passed to the program using | 78 | Several command line options can be passed to the program using |
@@ -891,7 +957,21 @@ Join the sandbox identified by name or start a new one. | |||
891 | Same as "firejail --join=sandboxname" command if sandbox with specified name exists, otherwise same as "name sandboxname". | 957 | Same as "firejail --join=sandboxname" command if sandbox with specified name exists, otherwise same as "name sandboxname". |
892 | 958 | ||
893 | .SH FILES | 959 | .SH FILES |
894 | /etc/firejail/filename.profile, $HOME/.config/firejail/filename.profile | 960 | .TP |
961 | \fB/etc/firejail/appname.profile | ||
962 | Global Firejail configuration consisting mainly of profiles for each application supported by default. | ||
963 | |||
964 | .TP | ||
965 | \fB$HOME/.config/firejail/appname.profile | ||
966 | User application profiles, will take precedence over the global profiles. | ||
967 | |||
968 | .TP | ||
969 | \fB/usr/share/doc/firejail/profile.template | ||
970 | Template for building new profiles. | ||
971 | |||
972 | .TP | ||
973 | \fB/usr/share/doc/firejail/redirect_alias-profile.template | ||
974 | Template for aliasing/redirecting profiles. | ||
895 | 975 | ||
896 | .SH LICENSE | 976 | .SH LICENSE |
897 | Firejail is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. | 977 | Firejail is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. |