diff options
Diffstat (limited to 'README.md')
-rw-r--r-- | README.md | 39 |
1 files changed, 39 insertions, 0 deletions
@@ -50,6 +50,45 @@ $ firejail --x11 --net=eth0 firefox | |||
50 | --x11 starts the server, --net is required in order to remove the main X11 server socket from the sandbox. | 50 | --x11 starts the server, --net is required in order to remove the main X11 server socket from the sandbox. |
51 | More information here: https://firejail.wordpress.com/documentation-2/x11-guide/ | 51 | More information here: https://firejail.wordpress.com/documentation-2/x11-guide/ |
52 | 52 | ||
53 | ## File transfers | ||
54 | ````` | ||
55 | FILE TRANSFERS | ||
56 | These features allow the user to inspect the file system container of | ||
57 | an existing sandbox and transfer files from the container to the host | ||
58 | file system. | ||
59 | |||
60 | --get=name filename | ||
61 | Retrieve the container file filename and store it on the host in | ||
62 | the current working directory. The container is spececified by | ||
63 | name (--name option). Full path is needed for filename. | ||
64 | |||
65 | --get=pid filename | ||
66 | Retrieve the container file filename and store it on the host in | ||
67 | the current working directory. The container is spececified by | ||
68 | process ID. Full path is needed for filename. | ||
69 | |||
70 | --ls=name dir_or_filename | ||
71 | List container files. The container is spececified by name | ||
72 | (--name option). Full path is needed for dir_or_filename. | ||
73 | |||
74 | --ls=pid dir_or_filename | ||
75 | List container files. The container is spececified by process | ||
76 | ID. Full path is needed for dir_or_filename. | ||
77 | |||
78 | Examples: | ||
79 | |||
80 | $ firejail --ls=mybrowser ~/Downloads | ||
81 | drwxr-xr-x netblue netblue 4096 . | ||
82 | drwxr-xr-x netblue netblue 4096 .. | ||
83 | -rw-r--r-- netblue netblue 7847 x11-x305.png | ||
84 | -rw-r--r-- netblue netblue 6800 x11-x642.png | ||
85 | -rw-r--r-- netblue netblue 34139 xpra-clipboard.png | ||
86 | |||
87 | $ firejail --get=mybrowser ~/Downloads/xpra-clipboard.png | ||
88 | |||
89 | |||
90 | ````` | ||
91 | |||
53 | ## Default seccomp filter update | 92 | ## Default seccomp filter update |
54 | 93 | ||
55 | Currently 50 syscalls are blacklisted by default, out of a total of 318 calls (AMD64, Debian Jessie). | 94 | Currently 50 syscalls are blacklisted by default, out of a total of 318 calls (AMD64, Debian Jessie). |