diff options
Diffstat (limited to 'README.md')
-rw-r--r-- | README.md | 9 |
1 files changed, 8 insertions, 1 deletions
@@ -207,6 +207,13 @@ The following features can be enabled or disabled: | |||
207 | 207 | ||
208 | x11 Enable or disable X11 sandboxing support, default enabled. | 208 | x11 Enable or disable X11 sandboxing support, default enabled. |
209 | 209 | ||
210 | force-nonewprivs | ||
211 | Force use of theh NO_NEW_PRIVS prctl(2) flag. | ||
212 | This mitigates the possibility of a user abusing firejail's | ||
213 | features to trick a privileged (suid or file capabilities) | ||
214 | process into loading code or configuration that is partially | ||
215 | under their control. Default disabled | ||
216 | |||
210 | xephyr-screen | 217 | xephyr-screen |
211 | Screen size for --x11=xephyr, default 800x600. Run | 218 | Screen size for --x11=xephyr, default 800x600. Run |
212 | /usr/bin/xrandr for a full list of resolutions available on your | 219 | /usr/bin/xrandr for a full list of resolutions available on your |
@@ -283,6 +290,6 @@ $ man firejail-profile | |||
283 | lxterminal, Epiphany, cherrytree, Polari, Vivaldi, Atril, qutebrowser, SlimJet, Battle for Wesnoth, Hedgewars, qTox, | 290 | lxterminal, Epiphany, cherrytree, Polari, Vivaldi, Atril, qutebrowser, SlimJet, Battle for Wesnoth, Hedgewars, qTox, |
284 | OpenSSH client, OpenBox window manager, Dillo, cmus, dnsmasq, PaleMoon, Icedove, abrowser, 0ad, netsurf, | 291 | OpenSSH client, OpenBox window manager, Dillo, cmus, dnsmasq, PaleMoon, Icedove, abrowser, 0ad, netsurf, |
285 | Warzone2100, okular, gwenview, Gpredict, Aweather, Stellarium, Google-Play-Music-Desktop-Player, quiterss, | 292 | Warzone2100, okular, gwenview, Gpredict, Aweather, Stellarium, Google-Play-Music-Desktop-Player, quiterss, |
286 | cyberfox, generic Ubuntu snap application profile, xplayer, xreader, xviewer, mcabber | 293 | cyberfox, generic Ubuntu snap application profile, xplayer, xreader, xviewer, mcabber, Psi+, Corebird, Konversation |
287 | 294 | ||
288 | 295 | ||