diff options
author | 2016-06-09 08:42:59 -0400 | |
---|---|---|
committer | 2016-06-09 08:42:59 -0400 | |
commit | d073a425b3e3ed3829a0e042e8c41963f0f40f0e (patch) | |
tree | 3241c3053a4d3ccba63c633015fddb6e21c9cf74 /src/man | |
parent | fixes (diff) | |
download | firejail-d073a425b3e3ed3829a0e042e8c41963f0f40f0e.tar.gz firejail-d073a425b3e3ed3829a0e042e8c41963f0f40f0e.tar.zst firejail-d073a425b3e3ed3829a0e042e8c41963f0f40f0e.zip |
whitelist support in /etc/firejail/firejail.config
Diffstat (limited to 'src/man')
-rw-r--r-- | src/man/firejail-config.txt | 19 |
1 files changed, 11 insertions, 8 deletions
diff --git a/src/man/firejail-config.txt b/src/man/firejail-config.txt index 026765f1a..6a66c7f75 100644 --- a/src/man/firejail-config.txt +++ b/src/man/firejail-config.txt | |||
@@ -26,6 +26,13 @@ Enable or disable chroot support, default enabled. | |||
26 | Enable or disable file transfer support, default enabled. | 26 | Enable or disable file transfer support, default enabled. |
27 | 27 | ||
28 | .TP | 28 | .TP |
29 | \fBforce-nonewprivs | ||
30 | Force use of nonewprivs. This mitigates the possibility of | ||
31 | a user abusing firejail's features to trick a privileged (suid | ||
32 | or file capabilities) process into loading code or configuration | ||
33 | that is partially under their control. Default disabled. | ||
34 | |||
35 | .TP | ||
29 | \fBnetwork | 36 | \fBnetwork |
30 | Enable or disable networking features, default enabled. | 37 | Enable or disable networking features, default enabled. |
31 | 38 | ||
@@ -45,16 +52,12 @@ Enable or disable seccomp support, default enabled. | |||
45 | Enable or disable user namespace support, default enabled. | 52 | Enable or disable user namespace support, default enabled. |
46 | 53 | ||
47 | .TP | 54 | .TP |
48 | \fBx11 | 55 | \fBwhitelist |
49 | Enable or disable X11 sandboxing support, default enabled. | 56 | Enable or disable whitelisting support, default enabled. |
50 | 57 | ||
51 | .TP | 58 | .TP |
52 | \fBforce-nonewprivs | 59 | \fBx11 |
53 | Force use of nonewprivs. This mitigates the possibility of | 60 | Enable or disable X11 sandboxing support, default enabled. |
54 | a user abusing firejail's features to trick a privileged (suid | ||
55 | or file capabilities) process into loading code or configuration | ||
56 | that is partially under their control. Default disabled. | ||
57 | |||
58 | 61 | ||
59 | .TP | 62 | .TP |
60 | \fBxephyr-screen | 63 | \fBxephyr-screen |