diff options
author | 2020-04-08 18:06:35 +0000 | |
---|---|---|
committer | 2020-04-08 18:06:35 +0000 | |
commit | 41d4e3d80b6e90807bcee8bdfc0fe5865ea8c890 (patch) | |
tree | cb1358e7fb1d2cb5006bb800935b833bb48ba0b0 /src/man | |
parent | fix typos in dbus-{system,user}.talk [usage.c] (diff) | |
download | firejail-41d4e3d80b6e90807bcee8bdfc0fe5865ea8c890.tar.gz firejail-41d4e3d80b6e90807bcee8bdfc0fe5865ea8c890.tar.zst firejail-41d4e3d80b6e90807bcee8bdfc0fe5865ea8c890.zip |
add example for overriding individiual DBus filter to firejail-profile.txt
See discussion in https://github.com/netblue30/firejail/pull/3326.
Diffstat (limited to 'src/man')
-rw-r--r-- | src/man/firejail-profile.txt | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/src/man/firejail-profile.txt b/src/man/firejail-profile.txt index adde9a27f..2a4bb9c0b 100644 --- a/src/man/firejail-profile.txt +++ b/src/man/firejail-profile.txt | |||
@@ -496,6 +496,22 @@ Allow the application to talk to the name org.freedesktop.Notifications on the s | |||
496 | .TP | 496 | .TP |
497 | \fBnodbus \fR(deprecated) | 497 | \fBnodbus \fR(deprecated) |
498 | Disable D-Bus access (both system and session buses). Equivalent to dbus-system none and dbus-user none. | 498 | Disable D-Bus access (both system and session buses). Equivalent to dbus-system none and dbus-user none. |
499 | .br | ||
500 | |||
501 | .br | ||
502 | Individual filters can be overridden via the \-\-ignore command. Supposing a profile has | ||
503 | |||
504 | [...] | ||
505 | dbus-user filter | ||
506 | dbus-user.own org.mozilla.firefox.* | ||
507 | dbus-user.talk org.freedesktop.Notifications | ||
508 | dbus-system none | ||
509 | [...] | ||
510 | |||
511 | and the user wants to disable notifications, this can be achieved by putting the below in a local override file: | ||
512 | [...] | ||
513 | ignore dbus-user.talk org.freedesktop.Notifications | ||
514 | [...] | ||
499 | 515 | ||
500 | .SH Resource limits, CPU affinity, Control Groups | 516 | .SH Resource limits, CPU affinity, Control Groups |
501 | These profile entries define the limits on system resources (rlimits) for the processes inside the sandbox. | 517 | These profile entries define the limits on system resources (rlimits) for the processes inside the sandbox. |