nodbus man pages, etc.

2 files changed, 14 insertions, 1 deletions

diff --git a/src/firejail/usage.c b/src/firejail/usage.c
index 15b548d20..d0292f524 100644
--- a/src/firejail/usage.c
+++ b/src/firejail/usage.c
@@ -132,7 +132,9 @@ void usage(void) {
 #endif
         printf("    --nice=value - set nice value.\n");
         printf("    --no3d - disable 3D hardware acceleration.\n");
-        printf("    --noblacklist=filename - disable blacklist for file or directory .\n");
+        printf("    --noblacklist=filename - disable blacklist for file or directory.\n");
+        printf("    --nodbus - disable D-Bus access.\n");
+        printf("    --nodvd - disable DVD and audio CD devices.\n");
         printf("    --noexec=filename - remount the file or directory noexec nosuid and nodev.\n");
         printf("    --nogroups - disable supplementary groups.\n");
         printf("    --nonewprivs - sets the NO_NEW_PRIVS prctl.\n");
diff --git a/src/man/firejail.txt b/src/man/firejail.txt
index 34e4102f6..f080c8c7b 100644
--- a/src/man/firejail.txt
+++ b/src/man/firejail.txt
@@ -1064,6 +1064,17 @@ $ nc dict.org 2628
 220 pan.alephnull.com dictd 1.12.1/rf on Linux 3.14-1-amd64
 .br
 .TP
+\fB\-\-nodbus
+Disable D-Bus access. Only the regular UNIX socket is handled by this command. To
+disable the abstract socket you would need to request a new network namespace using
+\-\-net command. Another option is to remove unix from \-\-protocol set.
+.br
+
+.br
+Example:
+.br
+$ firejail \-\-nodbus \-\-net=none
+.TP
 \fB\-\-nodvd
 Disable DVD and audio CD devices.
 .br