diff options
-rw-r--r-- | README.md | 21 |
1 files changed, 10 insertions, 11 deletions
@@ -107,7 +107,7 @@ See the following discussions for details: | |||
107 | 107 | ||
108 | Firejail is included in a large number of Linux distributions. | 108 | Firejail is included in a large number of Linux distributions. |
109 | 109 | ||
110 | You can also install one of the [released packages](http://sourceforge.net/projects/firejail/files/firejail), or clone Firejail’s source code from our Git repository and compile manually: | 110 | You can also install one of the [released packages](http://sourceforge.net/projects/firejail/files/firejail), or clone Firejail's source code from our Git repository and compile manually: |
111 | 111 | ||
112 | ````` | 112 | ````` |
113 | $ git clone https://github.com/netblue30/firejail.git | 113 | $ git clone https://github.com/netblue30/firejail.git |
@@ -196,27 +196,27 @@ We also keep a list of profile fixes for previous released versions in [etc-fixe | |||
196 | ### private-etc rework | 196 | ### private-etc rework |
197 | ````` | 197 | ````` |
198 | --private-etc, --private-etc=file,directory,@group | 198 | --private-etc, --private-etc=file,directory,@group |
199 | The files installed by --private-etc are copies of the original | 199 | The files installed by --private-etc are copies of the original |
200 | system files from /etc directory. By default, the command | 200 | system files from /etc directory. By default, the command |
201 | brings in a skeleton of files and directories used by most con‐ | 201 | brings in a skeleton of files and directories used by most |
202 | sole tools: | 202 | console tools: |
203 | 203 | ||
204 | $ firejail --private-etc dig debian.org | 204 | $ firejail --private-etc dig debian.org |
205 | 205 | ||
206 | For X11/GTK/QT/Gnome/KDE programs add @x11 group as a parame‐ | 206 | For X11/GTK/QT/Gnome/KDE programs add @x11 group as a |
207 | ter. Example: | 207 | parameter. Example: |
208 | 208 | ||
209 | $ firejail --private-etc=@x11,gcrypt,python* gimp | 209 | $ firejail --private-etc=@x11,gcrypt,python* gimp |
210 | 210 | ||
211 | gcrypt and /etc/python* directories are not part of the generic | 211 | gcrypt and /etc/python* directories are not part of the generic |
212 | @x11 group. File globbing is supported. | 212 | @x11 group. File globbing is supported. |
213 | 213 | ||
214 | For games, add @games group: | 214 | For games, add @games group: |
215 | 215 | ||
216 | $ firejail --private-etc=@games,@x11 warzone2100 | 216 | $ firejail --private-etc=@games,@x11 warzone2100 |
217 | 217 | ||
218 | Sound and networking files are included automatically, unless | 218 | Sound and networking files are included automatically, unless |
219 | --nosound or --net=none are specified. Files for encrypted | 219 | --nosound or --net=none are specified. Files for encrypted |
220 | TLS/SSL protocol are in @tls-ca group. | 220 | TLS/SSL protocol are in @tls-ca group. |
221 | 221 | ||
222 | $ firejail --private-etc=@tls-ca,wgetrc wget https://debian.org | 222 | $ firejail --private-etc=@tls-ca,wgetrc wget https://debian.org |
@@ -225,7 +225,6 @@ We also keep a list of profile fixes for previous released versions in [etc-fixe | |||
225 | by your program is using strace utility: | 225 | by your program is using strace utility: |
226 | 226 | ||
227 | $ strace /usr/bin/transmission-qt 2>&1 | grep open | grep etc | 227 | $ strace /usr/bin/transmission-qt 2>&1 | grep open | grep etc |
228 | |||
229 | ````` | 228 | ````` |
230 | We keep the list of groups in [src/include/etc_groups.h](https://github.com/netblue30/firejail/blob/master/src/include/etc_groups.h) | 229 | We keep the list of groups in [src/include/etc_groups.h](https://github.com/netblue30/firejail/blob/master/src/include/etc_groups.h) |
231 | Discussion: https://github.com/netblue30/firejail/discussions/5610 | 230 | Discussion: https://github.com/netblue30/firejail/discussions/5610 |