aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--src/man/firejail-profile.txt15
-rw-r--r--src/man/firejail.txt19
2 files changed, 30 insertions, 4 deletions
diff --git a/src/man/firejail-profile.txt b/src/man/firejail-profile.txt
index 198f33c00..daae85cfd 100644
--- a/src/man/firejail-profile.txt
+++ b/src/man/firejail-profile.txt
@@ -268,6 +268,8 @@ Use directory as user home.
268.TP 268.TP
269\fBprivate-bin file,file 269\fBprivate-bin file,file
270Build a new /bin in a temporary filesystem, and copy the programs in the list. 270Build a new /bin in a temporary filesystem, and copy the programs in the list.
271The files in the list must be expressed as relative to the /bin,
272/sbin, /usr/bin, /usr/sbin, or /usr/local/bin directories.
271The same directory is also bind-mounted over /sbin, /usr/bin and /usr/sbin. 273The same directory is also bind-mounted over /sbin, /usr/bin and /usr/sbin.
272.TP 274.TP
273\fBprivate-cache 275\fBprivate-cache
@@ -289,26 +291,37 @@ Use the options no3d, nodvd, nosound, notv, nou2f and novideo for additional res
289\fBprivate-etc file,directory 291\fBprivate-etc file,directory
290Build a new /etc in a temporary 292Build a new /etc in a temporary
291filesystem, and copy the files and directories in the list. 293filesystem, and copy the files and directories in the list.
294The files and directories in the list must be expressed as relative to
295the /etc directory.
292All modifications are discarded when the sandbox is closed. 296All modifications are discarded when the sandbox is closed.
293.TP 297.TP
294\fBprivate-home file,directory 298\fBprivate-home file,directory
295Build a new user home in a temporary 299Build a new user home in a temporary
296filesystem, and copy the files and directories in the list in the 300filesystem, and copy the files and directories in the list in the
297new home. All modifications are discarded when the sandbox is 301new home.
302The files and directories in the list must be expressed as relative to
303the current user's home directory.
304All modifications are discarded when the sandbox is
298closed. 305closed.
299.TP 306.TP
300\fBprivate-lib file,directory 307\fBprivate-lib file,directory
301Build a new /lib directory and bring in the libraries required by the application to run. 308Build a new /lib directory and bring in the libraries required by the application to run.
309The files and directories in the list must be expressed as relative to
310the /lib directory.
302This feature is still under development, see \fBman 1 firejail\fR for some examples. 311This feature is still under development, see \fBman 1 firejail\fR for some examples.
303.TP 312.TP
304\fBprivate-opt file,directory 313\fBprivate-opt file,directory
305Build a new /opt in a temporary 314Build a new /opt in a temporary
306filesystem, and copy the files and directories in the list. 315filesystem, and copy the files and directories in the list.
316The files and directories in the list must be expressed as relative to
317the /opt directory.
307All modifications are discarded when the sandbox is closed. 318All modifications are discarded when the sandbox is closed.
308.TP 319.TP
309\fBprivate-srv file,directory 320\fBprivate-srv file,directory
310Build a new /srv in a temporary 321Build a new /srv in a temporary
311filesystem, and copy the files and directories in the list. 322filesystem, and copy the files and directories in the list.
323The files and directories in the list must be expressed as relative to
324the /srv directory.
312All modifications are discarded when the sandbox is closed. 325All modifications are discarded when the sandbox is closed.
313.TP 326.TP
314\fBprivate-tmp 327\fBprivate-tmp
diff --git a/src/man/firejail.txt b/src/man/firejail.txt
index 982b40d89..647569354 100644
--- a/src/man/firejail.txt
+++ b/src/man/firejail.txt
@@ -1696,7 +1696,9 @@ $ firejail \-\-private=/home/netblue/firefox-home firefox
1696.TP 1696.TP
1697\fB\-\-private-bin=file,file 1697\fB\-\-private-bin=file,file
1698Build a new /bin in a temporary filesystem, and copy the programs in the list. 1698Build a new /bin in a temporary filesystem, and copy the programs in the list.
1699If no listed file is found, /bin directory will be empty. 1699The files in the list must be expressed as relative to the /bin,
1700/sbin, /usr/bin, /usr/sbin, or /usr/local/bin directories.
1701If no listed files are found, /bin directory will be empty.
1700The same directory is also bind-mounted over /sbin, /usr/bin, /usr/sbin and /usr/local/bin. 1702The same directory is also bind-mounted over /sbin, /usr/bin, /usr/sbin and /usr/local/bin.
1701All modifications are discarded when the sandbox is closed. File globbing is supported, 1703All modifications are discarded when the sandbox is closed. File globbing is supported,
1702see \fBFILE GLOBBING\fR section for more details. 1704see \fBFILE GLOBBING\fR section for more details.
@@ -1792,6 +1794,8 @@ $
1792\fB\-\-private-etc=file,directory 1794\fB\-\-private-etc=file,directory
1793Build a new /etc in a temporary 1795Build a new /etc in a temporary
1794filesystem, and copy the files and directories in the list. 1796filesystem, and copy the files and directories in the list.
1797The files and directories in the list must be expressed as relative to
1798the /etc directory.
1795If no listed file is found, /etc directory will be empty. 1799If no listed file is found, /etc directory will be empty.
1796All modifications are discarded when the sandbox is closed. 1800All modifications are discarded when the sandbox is closed.
1797.br 1801.br
@@ -1801,13 +1805,16 @@ Example:
1801.br 1805.br
1802$ firejail --private-etc=group,hostname,localtime, \\ 1806$ firejail --private-etc=group,hostname,localtime, \\
1803.br 1807.br
1804nsswitch.conf,passwd,resolv.conf 1808nsswitch.conf,passwd,resolv.conf,default/motd-news
1805 1809
1806.TP 1810.TP
1807\fB\-\-private-home=file,directory 1811\fB\-\-private-home=file,directory
1808Build a new user home in a temporary 1812Build a new user home in a temporary
1809filesystem, and copy the files and directories in the list in the 1813filesystem, and copy the files and directories in the list in the
1810new home. All modifications are discarded when the sandbox is 1814new home.
1815The files and directories in the list must be expressed as relative to
1816the current user's home directory.
1817All modifications are discarded when the sandbox is
1811closed. 1818closed.
1812.br 1819.br
1813 1820
@@ -1819,6 +1826,8 @@ $ firejail \-\-private-home=.mozilla firefox
1819.TP 1826.TP
1820\fB\-\-private-lib=file,directory 1827\fB\-\-private-lib=file,directory
1821This feature is currently under heavy development. Only amd64 platforms are supported at this moment. 1828This feature is currently under heavy development. Only amd64 platforms are supported at this moment.
1829The files and directories in the list must be expressed as relative to
1830the /lib directory.
1822The idea is to build a new /lib in a temporary filesystem, 1831The idea is to build a new /lib in a temporary filesystem,
1823with only the library files necessary to run the application. 1832with only the library files necessary to run the application.
1824It could be as simple as: 1833It could be as simple as:
@@ -1870,6 +1879,8 @@ $
1870\fB\-\-private-opt=file,directory 1879\fB\-\-private-opt=file,directory
1871Build a new /opt in a temporary 1880Build a new /opt in a temporary
1872filesystem, and copy the files and directories in the list. 1881filesystem, and copy the files and directories in the list.
1882The files and directories in the list must be expressed as relative to
1883the /opt directory.
1873If no listed file is found, /opt directory will be empty. 1884If no listed file is found, /opt directory will be empty.
1874All modifications are discarded when the sandbox is closed. 1885All modifications are discarded when the sandbox is closed.
1875.br 1886.br
@@ -1883,6 +1894,8 @@ $ firejail --private-opt=firefox /opt/firefox/firefox
1883\fB\-\-private-srv=file,directory 1894\fB\-\-private-srv=file,directory
1884Build a new /srv in a temporary 1895Build a new /srv in a temporary
1885filesystem, and copy the files and directories in the list. 1896filesystem, and copy the files and directories in the list.
1897The files and directories in the list must be expressed as relative to
1898the /srv directory.
1886If no listed file is found, /srv directory will be empty. 1899If no listed file is found, /srv directory will be empty.
1887All modifications are discarded when the sandbox is closed. 1900All modifications are discarded when the sandbox is closed.
1888.br 1901.br