diff options
| author |  netblue30 <netblue30@yahoo.com> | 2018-07-11 06:42:59 -0400 |
|---|---|---|
| committer | netblue30 <netblue30@yahoo.com> | 2018-07-11 06:42:59 -0400 |
| commit | 261d08d394559a05d804a76e52183f6e26d871f5 (patch) | |
| tree | 0f17c4d61ad92290863590ed4347c5e14729eb20 /src/man/firejail.txt | |
| parent | Add documentation for keep-dev-shm option (diff) | |
| download | firejail-261d08d394559a05d804a76e52183f6e26d871f5.tar.gz firejail-261d08d394559a05d804a76e52183f6e26d871f5.tar.zst firejail-261d08d394559a05d804a76e52183f6e26d871f5.zip | |
tunneling support - tap interface in --net option
Diffstat (limited to 'src/man/firejail.txt')
| -rw-r--r-- | src/man/firejail.txt | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/src/man/firejail.txt b/src/man/firejail.txt index 74a9a9da9..f29d9cddf 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt | |||
| @@ -816,6 +816,20 @@ $ firejail \-\-net=eth0 \-\-ip=192.168.1.80 \-\-dns=8.8.8.8 firefox | |||
| 816 | $ firejail \-\-net=wlan0 firefox | 816 | $ firejail \-\-net=wlan0 firefox |
| 817 | 817 | ||
| 818 | .TP | 818 | .TP |
| 819 | \fB\-\-net=tap_interface | ||
| 820 | Enable a new network namespace and connect it | ||
| 821 | to this ethernet tap interface using the standard Linux macvlan | ||
| 822 | driver. If the tap interface is not configured, the sandbox | ||
| 823 | will not try to configure the interface inside the sandbox. | ||
| 824 | Please use \-\-ip, \-\-netmask and \-\-defaultgw to specify the configuration. | ||
| 825 | .br | ||
| 826 | |||
| 827 | .br | ||
| 828 | Example: | ||
| 829 | .br | ||
| 830 | $ firejail \-\-net=tap0 \-\-ip=10.10.20.80 \-\-netmask=255.255.255.0 \-\-defaultgw=10.10.20.1 firefox | ||
| 831 | |||
| 832 | .TP | ||
| 819 | \fB\-\-net=none | 833 | \fB\-\-net=none |
| 820 | Enable a new, unconnected network namespace. The only interface | 834 | Enable a new, unconnected network namespace. The only interface |
| 821 | available in the new namespace is a new loopback interface (lo). | 835 | available in the new namespace is a new loopback interface (lo). |