diff options
Diffstat (limited to 'README.md')
-rw-r--r-- | README.md | 14 |
1 files changed, 13 insertions, 1 deletions
@@ -98,14 +98,23 @@ Use this issue to request new profiles: [#1139](https://github.com/netblue30/fir | |||
98 | ````` | 98 | ````` |
99 | # Current development version: 0.9.51 | 99 | # Current development version: 0.9.51 |
100 | 100 | ||
101 | ## Whitelisting /var | 101 | ## Whitelisting, globbing etc. |
102 | 102 | ||
103 | Add "include /etc/firejail/whitelist-var-common.inc" to an application profile and test it. If it's working, | 103 | Add "include /etc/firejail/whitelist-var-common.inc" to an application profile and test it. If it's working, |
104 | send a pull request. I did it so far for some more common applications like Firefox, Chromium etc. | 104 | send a pull request. I did it so far for some more common applications like Firefox, Chromium etc. |
105 | 105 | ||
106 | Added globbing support for --private-bin. Added whitlisting support for /etc and /usr/share. | ||
107 | |||
108 | --private-lib was enhanced to autodetect GTK2, GTK3 and Qt4 libraries. We do a test run with this option enabled | ||
109 | for the following applications: evince, galculator, gnome-calculator, | ||
110 | leafpad, mousepad, transmission-gtk, xcalc, xmr-stak-cpu, | ||
111 | atril, mate-color-select, tar, file, strings, gpicview, | ||
112 | eom, eog, gedit, pluma | ||
113 | |||
106 | ## Profile build tool | 114 | ## Profile build tool |
107 | ````` | 115 | ````` |
108 | $ firejail --build appname | 116 | $ firejail --build appname |
117 | $ firejail --build=appname.profile appname | ||
109 | ````` | 118 | ````` |
110 | The command builds a whitelisted profile. If /usr/bin/strace is installed on the system, it also | 119 | The command builds a whitelisted profile. If /usr/bin/strace is installed on the system, it also |
111 | builds a whitelisted seccomp profile. The program is run in a very relaxed sandbox, | 120 | builds a whitelisted seccomp profile. The program is run in a very relaxed sandbox, |
@@ -182,3 +191,6 @@ imagej, karbon, kdenlive, krita, linphone, lmms, macrofusion, mpd, natron, Natro | |||
182 | ricochet, shotcut, teamspeak3, tor, tor-browser-en, Viber, x-terminal-emulator, zart, | 191 | ricochet, shotcut, teamspeak3, tor, tor-browser-en, Viber, x-terminal-emulator, zart, |
183 | conky, arch-audit, ffmpeg, bluefish, cliqz, cinelerra, openshot-qt, pinta, uefitool, | 192 | conky, arch-audit, ffmpeg, bluefish, cliqz, cinelerra, openshot-qt, pinta, uefitool, |
184 | aosp, pdfmod, gnome-ring, signal-dekstop, xcalc, zaproxy | 193 | aosp, pdfmod, gnome-ring, signal-dekstop, xcalc, zaproxy |
194 | |||
195 | Upstreamed many profiles from the following sources: https://github.com/chiraag-nataraj/firejail-profiles, | ||
196 | https://github.com/nyancat18/fe, and https://aur.archlinux.org/packages/firejail-profiles. \ No newline at end of file | ||