aboutsummaryrefslogtreecommitdiffstats
path: root/README.md
diff options
context:
space:
mode:
Diffstat (limited to 'README.md')
-rw-r--r--README.md14
1 files changed, 13 insertions, 1 deletions
diff --git a/README.md b/README.md
index 549d3fdc4..d69e6d89b 100644
--- a/README.md
+++ b/README.md
@@ -98,14 +98,23 @@ Use this issue to request new profiles: [#1139](https://github.com/netblue30/fir
98````` 98`````
99# Current development version: 0.9.51 99# Current development version: 0.9.51
100 100
101## Whitelisting /var 101## Whitelisting, globbing etc.
102 102
103Add "include /etc/firejail/whitelist-var-common.inc" to an application profile and test it. If it's working, 103Add "include /etc/firejail/whitelist-var-common.inc" to an application profile and test it. If it's working,
104send a pull request. I did it so far for some more common applications like Firefox, Chromium etc. 104send a pull request. I did it so far for some more common applications like Firefox, Chromium etc.
105 105
106Added globbing support for --private-bin. Added whitlisting support for /etc and /usr/share.
107
108--private-lib was enhanced to autodetect GTK2, GTK3 and Qt4 libraries. We do a test run with this option enabled
109for the following applications: evince, galculator, gnome-calculator,
110 leafpad, mousepad, transmission-gtk, xcalc, xmr-stak-cpu,
111 atril, mate-color-select, tar, file, strings, gpicview,
112 eom, eog, gedit, pluma
113
106## Profile build tool 114## Profile build tool
107````` 115`````
108$ firejail --build appname 116$ firejail --build appname
117$ firejail --build=appname.profile appname
109````` 118`````
110The command builds a whitelisted profile. If /usr/bin/strace is installed on the system, it also 119The command builds a whitelisted profile. If /usr/bin/strace is installed on the system, it also
111builds a whitelisted seccomp profile. The program is run in a very relaxed sandbox, 120builds a whitelisted seccomp profile. The program is run in a very relaxed sandbox,
@@ -182,3 +191,6 @@ imagej, karbon, kdenlive, krita, linphone, lmms, macrofusion, mpd, natron, Natro
182ricochet, shotcut, teamspeak3, tor, tor-browser-en, Viber, x-terminal-emulator, zart, 191ricochet, shotcut, teamspeak3, tor, tor-browser-en, Viber, x-terminal-emulator, zart,
183conky, arch-audit, ffmpeg, bluefish, cliqz, cinelerra, openshot-qt, pinta, uefitool, 192conky, arch-audit, ffmpeg, bluefish, cliqz, cinelerra, openshot-qt, pinta, uefitool,
184aosp, pdfmod, gnome-ring, signal-dekstop, xcalc, zaproxy 193aosp, pdfmod, gnome-ring, signal-dekstop, xcalc, zaproxy
194
195Upstreamed many profiles from the following sources: https://github.com/chiraag-nataraj/firejail-profiles,
196https://github.com/nyancat18/fe, and https://aur.archlinux.org/packages/firejail-profiles. \ No newline at end of file