diff options
author | 2023-10-24 12:43:46 -0400 | |
---|---|---|
committer | 2023-11-07 17:55:13 -0300 | |
commit | 13b2c566df883269b55f77757bb50a5d2890ec20 (patch) | |
tree | 5c7ccc9d00886b93c4429a91671161fa6464f1f9 /src/zsh_completion | |
parent | cleanup (diff) | |
download | firejail-13b2c566d.tar.gz firejail-13b2c566d.tar.zst firejail-13b2c566d.zip |
feature: add Landlock support
Based on 5315 by ChrysoliteAzalea.
It is based on the same underlying structure, but with a lot of
refactoring/simplification and with bugfixes and improvements.
Co-authored-by: Kelvin M. Klann <kmk3.code@protonmail.com>
Co-authored-by: Азалия Смарагдова <charming.flurry@yandex.ru>
Diffstat (limited to 'src/zsh_completion')
-rw-r--r-- | src/zsh_completion/_firejail.in | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/src/zsh_completion/_firejail.in b/src/zsh_completion/_firejail.in index 7e87bb991..89cb1b84c 100644 --- a/src/zsh_completion/_firejail.in +++ b/src/zsh_completion/_firejail.in | |||
@@ -106,6 +106,11 @@ _firejail_args=( | |||
106 | '--keep-fd[inherit open file descriptors to sandbox]: :' | 106 | '--keep-fd[inherit open file descriptors to sandbox]: :' |
107 | '--keep-shell-rc[do not copy shell rc files from /etc/skel]' | 107 | '--keep-shell-rc[do not copy shell rc files from /etc/skel]' |
108 | '--keep-var-tmp[/var/tmp directory is untouched]' | 108 | '--keep-var-tmp[/var/tmp directory is untouched]' |
109 | '--landlock.proc=-[add an access rule for /proc to the Landlock ruleset]: :(no ro rw)' | ||
110 | '--landlock.read=-[add a read access rule for the path to the Landlock ruleset]: :_files' | ||
111 | '--landlock.write=-[add a write access rule for the path to the Landlock ruleset]: :_files' | ||
112 | '--landlock.special=-[add an access rule for the path to the Landlock ruleset for creating block/char devices, named pipes and sockets]: :_files' | ||
113 | '--landlock.execute=-[add an execute access rule for the path to the Landlock ruleset]: :_files' | ||
109 | '--machine-id[spoof /etc/machine-id with a random id]' | 114 | '--machine-id[spoof /etc/machine-id with a random id]' |
110 | '--memory-deny-write-execute[seccomp filter to block attempts to create memory mappings that are both writable and executable]' | 115 | '--memory-deny-write-execute[seccomp filter to block attempts to create memory mappings that are both writable and executable]' |
111 | '*--mkdir=-[create a directory]:' | 116 | '*--mkdir=-[create a directory]:' |