aboutsummaryrefslogtreecommitdiffstats
path: root/src/man/firejail-profile.txt
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2016-04-21 10:47:52 -0400
committerLibravatar netblue30 <netblue30@yahoo.com>2016-04-21 10:47:52 -0400
commite547b142597568da678c54da8b5b4164fb3fee86 (patch)
tree6a738b916c330c85216d0cddcedc971150cb98b2 /src/man/firejail-profile.txt
parentadded --read-write option (diff)
downloadfirejail-e547b142597568da678c54da8b5b4164fb3fee86.tar.gz
firejail-e547b142597568da678c54da8b5b4164fb3fee86.tar.zst
firejail-e547b142597568da678c54da8b5b4164fb3fee86.zip
--read-write option
Diffstat (limited to 'src/man/firejail-profile.txt')
-rw-r--r--src/man/firejail-profile.txt21
1 files changed, 12 insertions, 9 deletions
diff --git a/src/man/firejail-profile.txt b/src/man/firejail-profile.txt
index 8ad2eefad..19063f5ef 100644
--- a/src/man/firejail-profile.txt
+++ b/src/man/firejail-profile.txt
@@ -122,12 +122,6 @@ blacklist ${PATH}/ifconfig
122blacklist ${HOME}/.ssh 122blacklist ${HOME}/.ssh
123 123
124.TP 124.TP
125\fBread-only file_or_directory
126Make directory or file read-only.
127.TP
128\fBtmpfs directory
129Mount an empty tmpfs filesystem on top of directory. This option is available only when running the sandbox as root.
130.TP
131\fBbind directory1,directory2 125\fBbind directory1,directory2
132Mount-bind directory1 on top of directory2. This option is only available when running as root. 126Mount-bind directory1 on top of directory2. This option is only available when running as root.
133.TP 127.TP
@@ -182,6 +176,18 @@ All modifications are discarded when the sandbox is closed.
182\fBprivate-tmp 176\fBprivate-tmp
183Mount an empty temporary filesystem on top of /tmp directory. 177Mount an empty temporary filesystem on top of /tmp directory.
184.TP 178.TP
179\fBread-only file_or_directory
180Make directory or file read-only.
181.TP
182\fBread-write file_or_directory
183Make directory or file read-write.
184.TP
185\fBtmpfs directory
186Mount an empty tmpfs filesystem on top of directory. This option is available only when running the sandbox as root.
187.TP
188\fBtracelog
189Blacklist violations logged to syslog.
190.TP
185\fBwhitelist file_or_directory 191\fBwhitelist file_or_directory
186Build a new user home in a temporary filesystem, and mount-bind file_or_directory. 192Build a new user home in a temporary filesystem, and mount-bind file_or_directory.
187The modifications to file_or_directory are persistent, everything else is discarded 193The modifications to file_or_directory are persistent, everything else is discarded
@@ -194,9 +200,6 @@ when running the sandbox as root user.
194\fBwritable-var 200\fBwritable-var
195Mount /var directory read-write. This option is available only 201Mount /var directory read-write. This option is available only
196when running the sandbox as root user. 202when running the sandbox as root user.
197.TP
198\fBtracelog
199Blacklist violations logged to syslog.
200.SH Security filters 203.SH Security filters
201The following security filters are currently implemented: 204The following security filters are currently implemented:
202 205