diff options
author | 2022-03-09 15:38:53 +0100 | |
---|---|---|
committer | 2022-03-09 15:38:53 +0100 | |
commit | fdee4dc1326bb2d5ce90ef2a0410dccba56beb70 (patch) | |
tree | bc57a8063010c1c394ba53c429b17fd1b37f20b4 /src | |
parent | xdg dir translation cleanup (diff) | |
download | firejail-fdee4dc1326bb2d5ce90ef2a0410dccba56beb70.tar.gz firejail-fdee4dc1326bb2d5ce90ef2a0410dccba56beb70.tar.zst firejail-fdee4dc1326bb2d5ce90ef2a0410dccba56beb70.zip |
build option: support chromium/electron apps most of the time
Diffstat (limited to 'src')
-rw-r--r-- | src/fbuilder/build_profile.c | 2 | ||||
-rw-r--r-- | src/man/firejail.txt | 4 |
2 files changed, 3 insertions, 3 deletions
diff --git a/src/fbuilder/build_profile.c b/src/fbuilder/build_profile.c index 3a7a12fb3..1c1891d0b 100644 --- a/src/fbuilder/build_profile.c +++ b/src/fbuilder/build_profile.c | |||
@@ -52,7 +52,7 @@ void build_profile(int argc, char **argv, int index, FILE *fp) { | |||
52 | cmd[curr_len++] = "--quiet"; | 52 | cmd[curr_len++] = "--quiet"; |
53 | cmd[curr_len++] = "--noprofile"; | 53 | cmd[curr_len++] = "--noprofile"; |
54 | cmd[curr_len++] = "--caps.drop=all"; | 54 | cmd[curr_len++] = "--caps.drop=all"; |
55 | cmd[curr_len++] = "--seccomp"; | 55 | cmd[curr_len++] = "--seccomp=!chroot"; |
56 | cmd[curr_len++] = "--shell=none"; | 56 | cmd[curr_len++] = "--shell=none"; |
57 | cmd[curr_len++] = output; | 57 | cmd[curr_len++] = output; |
58 | if (arg_appimage) | 58 | if (arg_appimage) |
diff --git a/src/man/firejail.txt b/src/man/firejail.txt index e4aac6b1c..f9deaeaa4 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt | |||
@@ -185,7 +185,7 @@ $ firejail "\-\-blacklist=/home/username/My Virtual Machines" | |||
185 | $ firejail \-\-blacklist=/home/username/My\\ Virtual\\ Machines | 185 | $ firejail \-\-blacklist=/home/username/My\\ Virtual\\ Machines |
186 | .TP | 186 | .TP |
187 | \fB\-\-build | 187 | \fB\-\-build |
188 | The command builds a whitelisted profile. The profile is printed on the screen. The program is run in a very relaxed sandbox, with only --caps.drop=all and --nonewprivs. Programs that raise user privileges are not supported. Chromium and Chromium-based browsers will not work. | 188 | The command builds a whitelisted profile. The profile is printed on the screen. The program is run in a very relaxed sandbox, with only --caps.drop=all and --nonewprivs. Programs that raise user privileges are not supported. |
189 | .br | 189 | .br |
190 | 190 | ||
191 | .br | 191 | .br |
@@ -195,7 +195,7 @@ $ firejail --build vlc ~/Videos/test.mp4 | |||
195 | .TP | 195 | .TP |
196 | \fB\-\-build=profile-file | 196 | \fB\-\-build=profile-file |
197 | The command builds a whitelisted profile, and saves it in profile-file. The program is run in a very relaxed sandbox, | 197 | The command builds a whitelisted profile, and saves it in profile-file. The program is run in a very relaxed sandbox, |
198 | with only --caps.drop=all and --nonewprivs. Programs that raise user privileges are not supported. Chromium and Chromium-based browsers will not work. | 198 | with only --caps.drop=all and --nonewprivs. Programs that raise user privileges are not supported. |
199 | .br | 199 | .br |
200 | 200 | ||
201 | .br | 201 | .br |