aboutsummaryrefslogtreecommitdiffstats
path: root/src/man
diff options
context:
space:
mode:
authorLibravatar root <root@debian>2016-01-26 08:38:54 -0500
committerLibravatar root <root@debian>2016-01-26 08:38:54 -0500
commit3a8649e37789151f235c5f01e846b7228bac402b (patch)
tree9848db30a0657041821f608575c7957d6d34f1fe /src/man
parent--tmpfs allowd only as root user (diff)
downloadfirejail-3a8649e37789151f235c5f01e846b7228bac402b.tar.gz
firejail-3a8649e37789151f235c5f01e846b7228bac402b.tar.zst
firejail-3a8649e37789151f235c5f01e846b7228bac402b.zip
--private-tmp
Diffstat (limited to 'src/man')
-rw-r--r--src/man/firejail-profile.txt9
-rw-r--r--src/man/firejail.txt11
2 files changed, 17 insertions, 3 deletions
diff --git a/src/man/firejail-profile.txt b/src/man/firejail-profile.txt
index 2f17c3088..90c59d753 100644
--- a/src/man/firejail-profile.txt
+++ b/src/man/firejail-profile.txt
@@ -139,13 +139,13 @@ Mount new /root and /home/user directories in temporary
139filesystems. All modifications are discarded when the sandbox is 139filesystems. All modifications are discarded when the sandbox is
140closed. 140closed.
141.TP 141.TP
142\fBprivate directory
143Use directory as user home.
144.TP
142\fBprivate-bin file,file 145\fBprivate-bin file,file
143Build a new /bin in a temporary filesystem, and copy the programs in the list. 146Build a new /bin in a temporary filesystem, and copy the programs in the list.
144The same directory is also bind-mounted over /sbin, /usr/bin and /usr/sbin. 147The same directory is also bind-mounted over /sbin, /usr/bin and /usr/sbin.
145.TP 148.TP
146\fBprivate directory
147Use directory as user home.
148.TP
149\fBprivate-home file,directory 149\fBprivate-home file,directory
150Build a new user home in a temporary 150Build a new user home in a temporary
151filesystem, and copy the files and directories in the list in the 151filesystem, and copy the files and directories in the list in the
@@ -160,6 +160,9 @@ Build a new /etc in a temporary
160filesystem, and copy the files and directories in the list. 160filesystem, and copy the files and directories in the list.
161All modifications are discarded when the sandbox is closed. 161All modifications are discarded when the sandbox is closed.
162.TP 162.TP
163\fBprivate-tmp
164Mount an empty temporary filesystem on top of /tmp directory.
165.TP
163\fBwhitelist file_or_directory 166\fBwhitelist file_or_directory
164Build a new user home in a temporary filesystem, and mount-bind file_or_directory. 167Build a new user home in a temporary filesystem, and mount-bind file_or_directory.
165The modifications to file_or_directory are persistent, everything else is discarded 168The modifications to file_or_directory are persistent, everything else is discarded
diff --git a/src/man/firejail.txt b/src/man/firejail.txt
index 43572bb4b..877ee0ce5 100644
--- a/src/man/firejail.txt
+++ b/src/man/firejail.txt
@@ -1004,6 +1004,17 @@ Example:
1004$ firejail --private-etc=group,hostname,localtime, \\ 1004$ firejail --private-etc=group,hostname,localtime, \\
1005.br 1005.br
1006nsswitch.conf,passwd,resolv.conf 1006nsswitch.conf,passwd,resolv.conf
1007
1008.TP
1009\fB\-\-private-tmp
1010Mount an empty temporary filesystem on top of /tmp directory.
1011.br
1012
1013.br
1014Example:
1015.br
1016$ firejail \-\-private-tmp
1017
1007.TP 1018.TP
1008\fB\-\-profile=filename 1019\fB\-\-profile=filename
1009Load a custom security profile from filename. For filename use an absolute path or a path relative to the current path. 1020Load a custom security profile from filename. For filename use an absolute path or a path relative to the current path.