aboutsummaryrefslogtreecommitdiffstats
path: root/src/man/firejail-users.5.in
diff options
context:
space:
mode:
authorLibravatar Kelvin M. Klann <kmk3.code@protonmail.com>2023-07-12 01:55:07 -0300
committerLibravatar Kelvin M. Klann <kmk3.code@protonmail.com>2023-07-13 11:43:53 -0300
commit76bd5ad0f8347bc111c30f67b2eb151c2e5870ed (patch)
tree3fd235c83d6ce45451abc80dca27420203d3aad6 /src/man/firejail-users.5.in
parentbuild: restore seccomp filter targets (diff)
downloadfirejail-76bd5ad0f8347bc111c30f67b2eb151c2e5870ed.tar.gz
firejail-76bd5ad0f8347bc111c30f67b2eb151c2e5870ed.tar.zst
firejail-76bd5ad0f8347bc111c30f67b2eb151c2e5870ed.zip
build: simplify code related to man pages
Simplify the main targets and use wildcards instead of repeating the filenames manually. Also, restore the `man` target and building only when `HAVE_MAN` is enabled. Note: Make automatically removes intermediate files (.1 and .5), so in general only the .gz files have to be cleaned. Commands used to rename the man pages: cd src/man git mv firecfg.txt firecfg.1.in git mv firejail-login.txt firejail-login.5.in git mv firejail-profile.txt firejail-profile.5.in git mv firejail-users.txt firejail-users.5.in git mv firejail.txt firejail.1.in git mv firemon.txt firemon.1.in git mv jailcheck.txt jailcheck.1.in This is kind of a follow-up to commit 9e206b7f2 ("rework src/man Makefile", 2023-07-07).
Diffstat (limited to 'src/man/firejail-users.5.in')
-rw-r--r--src/man/firejail-users.5.in63
1 files changed, 63 insertions, 0 deletions
diff --git a/src/man/firejail-users.5.in b/src/man/firejail-users.5.in
new file mode 100644
index 000000000..7aa151680
--- /dev/null
+++ b/src/man/firejail-users.5.in
@@ -0,0 +1,63 @@
1.TH FIREJAIL-USERS 5 "MONTH YEAR" "VERSION" "firejail.users man page"
2.SH NAME
3firejail.users \- Firejail user access database
4
5.SH DESCRIPTION
6/etc/firejail/firejail.users lists the users allowed to run firejail SUID executable.
7root user is allowed by default, user nobody is never allowed.
8
9If the user is not allowed to start the sandbox, Firejail will attempt to run the
10program without sandboxing it.
11
12If the file is not present in the system, all users are allowed to use the sandbox.
13
14Example:
15
16 $ cat /etc/firejail/firejail.users
17.br
18 dustin
19.br
20 lucas
21.br
22 mike
23.br
24 eleven
25
26Use a text editor to add or remove users from the list. You can also use firecfg \-\-add-users
27command. Example:
28
29 $ sudo firecfg --add-users dustin lucas mike eleven
30
31By default, running firecfg creates the file and adds the current user to the list. Example:
32
33 $ sudo firecfg
34
35See \fBman 1 firecfg\fR for details.
36
37.SH ALTERNATIVE SOLUTION
38An alternative way of restricting user access to firejail executable is to create a special firejail user group and
39allow only users in this group to run the sandbox:
40
41 # addgroup --system firejail
42.br
43 # chown root:firejail /usr/bin/firejail
44.br
45 # chmod 4750 /usr/bin/firejail
46
47
48.SH FILES
49/etc/firejail/firejail.users
50
51.SH LICENSE
52Firejail is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License
53as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.
54.PP
55Homepage: https://firejail.wordpress.com
56.SH SEE ALSO
57.BR firejail (1),
58.BR firemon (1),
59.BR firecfg (1),
60.BR firejail-profile (5),
61.BR firejail-login (5),
62.BR jailcheck (1)
63.\" vim: set filetype=groff :