aboutsummaryrefslogtreecommitdiffstats
path: root/src/man
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2016-03-04 20:25:29 -0500
committerLibravatar netblue30 <netblue30@yahoo.com>2016-03-04 20:25:29 -0500
commit5b3f207558cb12a2ac15bded2c70214ffeb3a8fd (patch)
tree1e2231b1f6c72d758e675f8a25c8dd5341b793ce /src/man
parent--ls (diff)
downloadfirejail-5b3f207558cb12a2ac15bded2c70214ffeb3a8fd.tar.gz
firejail-5b3f207558cb12a2ac15bded2c70214ffeb3a8fd.tar.zst
firejail-5b3f207558cb12a2ac15bded2c70214ffeb3a8fd.zip
documentation
Diffstat (limited to 'src/man')
-rw-r--r--src/man/firejail.txt41
1 files changed, 17 insertions, 24 deletions
diff --git a/src/man/firejail.txt b/src/man/firejail.txt
index 3a9b41330..56a768614 100644
--- a/src/man/firejail.txt
+++ b/src/man/firejail.txt
@@ -11,7 +11,7 @@ firejail [OPTIONS] [program and arguments]
11Network traffic shaping for an existing sandbox: 11Network traffic shaping for an existing sandbox:
12.PP 12.PP
13.RS 13.RS
14firejail \-\-bandwidth={<name>|<PID>} bandwidth-command 14firejail \-\-bandwidth={name|pid} bandwidth-command
15.RE 15.RE
16.PP 16.PP
17Monitoring: 17Monitoring:
@@ -68,20 +68,8 @@ $ firejail [OPTIONS] firefox # starting Mozilla Firefox
68\fB\-\- 68\fB\-\-
69Signal the end of options and disables further option processing. 69Signal the end of options and disables further option processing.
70.TP 70.TP
71\fB\-\-bandwidth=name 71\fB\-\-bandwidth=name|pid
72Set bandwidth limits for the sandbox identified by name, see \fBTRAFFIC SHAPING\fR section for more details. 72Set bandwidth limits for the sandbox identified by name or PID, see \fBTRAFFIC SHAPING\fR section for more details.
73.TP
74\fB\-\-bandwidth=pid
75Set bandwidth limits for the sandbox identified by PID, see \fBTRAFFIC SHAPING\fR section for more details.
76.TP
77\fB\-\-bind=dirname1,dirname2
78Mount-bind dirname1 on top of dirname2. This option is only available when running the sandbox as root.
79.br
80
81.br
82Example:
83.br
84# firejail \-\-bind=/config/www,/var/www
85.TP 73.TP
86\fB\-\-bind=filename1,filename2 74\fB\-\-bind=filename1,filename2
87Mount-bind filename1 on top of filename2. This option is only available when running as root. 75Mount-bind filename1 on top of filename2. This option is only available when running as root.
@@ -104,6 +92,8 @@ $ firejail \-\-blacklist=/sbin \-\-blacklist=/usr/sbin
104$ firejail \-\-blacklist=~/.mozilla 92$ firejail \-\-blacklist=~/.mozilla
105.br 93.br
106$ firejail "\-\-blacklist=/home/username/My Virtual Machines" 94$ firejail "\-\-blacklist=/home/username/My Virtual Machines"
95.br
96$ firejail \-\-blacklist=/home/username/My\\ Virtual\\ Machines
107.TP 97.TP
108\fB\-c 98\fB\-c
109Execute command and exit. 99Execute command and exit.
@@ -1699,7 +1689,7 @@ Additional arguments passed to firejail executable upon login are declared in /e
1699.SH EXAMPLES 1689.SH EXAMPLES
1700.TP 1690.TP
1701\f\firejail 1691\f\firejail
1702Start a regular /bin/bash session in sandbox. 1692Sandbox a regular /bin/bash session.
1703.TP 1693.TP
1704\f\firejail firefox 1694\f\firejail firefox
1705Start Mozilla Firefox. 1695Start Mozilla Firefox.
@@ -1707,17 +1697,20 @@ Start Mozilla Firefox.
1707\f\firejail \-\-debug firefox 1697\f\firejail \-\-debug firefox
1708Debug Firefox sandbox. 1698Debug Firefox sandbox.
1709.TP 1699.TP
1710\f\firejail \-\-private 1700\f\firejail \-\-private firefox
1711Start a /bin/bash session with a new tmpfs home directory. 1701Start Firefox with a new, empty home directory.
1702.TP
1703\f\firejail --net=none vlc
1704Start VLC in an unconnected network namespace.
1712.TP 1705.TP
1713\f\firejail \-\-net=br0 ip=10.10.20.10 1706\f\firejail \-\-net=eth0 firefox
1714Start a /bin/bash session in a new network namespace. The session is 1707Start Firefox in a new network namespace. An IP address is
1715connected to the main network using br0 bridge device. An IP address 1708assigned automatically.
1716of 10.10.20.10 is assigned to the sandbox.
1717.TP 1709.TP
1718\f\firejail \-\-net=br0 \-\-net=br1 \-\-net=br2 1710\f\firejail \-\-net=br0 \-\-ip=10.10.20.5 \-\-net=br1 \-\-net=br2
1719Start a /bin/bash session in a new network namespace and connect it 1711Start a /bin/bash session in a new network namespace and connect it
1720to br0, br1, and br2 host bridge devices. 1712to br0, br1, and br2 host bridge devices. IP addresses are assigned
1713automatically for the interfaces connected to br1 and b2
1721.TP 1714.TP
1722\f\firejail \-\-list 1715\f\firejail \-\-list
1723List all sandboxed processes. 1716List all sandboxed processes.