diff options
author | 2015-11-21 09:08:26 -0500 | |
---|---|---|
committer | 2015-11-21 09:08:26 -0500 | |
commit | a578bd5d2a03232ee9f94677df25d12a2759003b (patch) | |
tree | fd3ffbfd3e39da2f24126f19bd3d6612ab3c7005 /src/man/firejail.txt | |
parent | added webserver.net and nolocal.net network filters (diff) | |
download | firejail-a578bd5d2a03232ee9f94677df25d12a2759003b.tar.gz firejail-a578bd5d2a03232ee9f94677df25d12a2759003b.tar.zst firejail-a578bd5d2a03232ee9f94677df25d12a2759003b.zip |
man pages and --help
Diffstat (limited to 'src/man/firejail.txt')
-rw-r--r-- | src/man/firejail.txt | 49 |
1 files changed, 35 insertions, 14 deletions
diff --git a/src/man/firejail.txt b/src/man/firejail.txt index 00abc13db..d144fac10 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt | |||
@@ -61,11 +61,7 @@ $ firejail [OPTIONS] # starting a /bin/bash shell | |||
61 | .PP | 61 | .PP |
62 | $ firejail [OPTIONS] firefox # starting Mozilla Firefox | 62 | $ firejail [OPTIONS] firefox # starting Mozilla Firefox |
63 | .PP | 63 | .PP |
64 | Multiple commands can be run in sandbox using regular bash logic operators: | 64 | # sudo firejail [OPTIONS] /etc/init.d/nginx start |
65 | .PP | ||
66 | # sudo firejail [OPTIONS] "/etc/init.d/nginx start && sleep inf" | ||
67 | .PP | ||
68 | In the previous example, "sleep inf" command is required in order to keep the session open for the daemon program. | ||
69 | 65 | ||
70 | .SH OPTIONS | 66 | .SH OPTIONS |
71 | .TP | 67 | .TP |
@@ -906,6 +902,37 @@ Example: | |||
906 | .br | 902 | .br |
907 | $ firejail \-\-protocol=unix,inet,inet6 firefox | 903 | $ firejail \-\-protocol=unix,inet,inet6 firefox |
908 | .TP | 904 | .TP |
905 | \fB\-\-protocol.print=name | ||
906 | Print the protocol filter for the sandbox identified by name. | ||
907 | .br | ||
908 | |||
909 | .br | ||
910 | Example: | ||
911 | .br | ||
912 | $ firejail \-\-name=mybrowser firefox & | ||
913 | .br | ||
914 | [...] | ||
915 | .br | ||
916 | $ firejail \-\-print.print=mybrowser | ||
917 | .br | ||
918 | unix,inet,inet6,netlink | ||
919 | |||
920 | .TP | ||
921 | \fB\-\-protocol.print=pid | ||
922 | Print the protocol filter for a sandbox identified by PID. | ||
923 | .br | ||
924 | |||
925 | .br | ||
926 | Example: | ||
927 | .br | ||
928 | $ firejail \-\-list | ||
929 | .br | ||
930 | 3272:netblue:firejail \-\-private firefox | ||
931 | .br | ||
932 | $ firejail \-\-protocol.print=3272 | ||
933 | .br | ||
934 | unix,inet,inet6,netlink | ||
935 | .TP | ||
909 | \fB\-\-quiet | 936 | \fB\-\-quiet |
910 | Turn off Firejail's output. | 937 | Turn off Firejail's output. |
911 | .TP | 938 | .TP |
@@ -1411,10 +1438,10 @@ Reading profile /home/netblue/.config/firejail/icecat.profile | |||
1411 | [...] | 1438 | [...] |
1412 | .RE | 1439 | .RE |
1413 | 1440 | ||
1414 | 3. Use a default.profile file if the sandbox | 1441 | 3. Use default.profile file if the sandbox |
1415 | is started by a regular user, or a server.profile file if the sandbox | 1442 | is started by a regular user, or server.profile file if the sandbox |
1416 | is started by root. Firejail looks for these files in ~/.config/firejail directory, followed by /etc/firejail directory. | 1443 | is started by root. Firejail looks for these files in ~/.config/firejail directory, followed by /etc/firejail directory. |
1417 | To disable default profile loading, use --noroot command option. Example: | 1444 | To disable default profile loading, use --noprofile command option. Example: |
1418 | .PP | 1445 | .PP |
1419 | .RS | 1446 | .RS |
1420 | $ firejail | 1447 | $ firejail |
@@ -1457,12 +1484,6 @@ Start a regular /bin/bash session in sandbox. | |||
1457 | \f\firejail firefox | 1484 | \f\firejail firefox |
1458 | Start Mozilla Firefox. | 1485 | Start Mozilla Firefox. |
1459 | .TP | 1486 | .TP |
1460 | \f\firejail \-\-seccomp firefox | ||
1461 | Start Mozilla Firefox in a seccomp sandbox. | ||
1462 | .TP | ||
1463 | \f\firejail \-\-caps firefox | ||
1464 | Start Mozilla Firefox in a Linux capabilities sandbox. | ||
1465 | .TP | ||
1466 | \f\firejail \-\-debug firefox | 1487 | \f\firejail \-\-debug firefox |
1467 | Debug Firefox sandbox. | 1488 | Debug Firefox sandbox. |
1468 | .TP | 1489 | .TP |