diff options
Diffstat (limited to 'etc/profile-m-z/noprofile.profile')
| -rw-r--r-- | etc/profile-m-z/noprofile.profile | 15 |
1 files changed, 7 insertions, 8 deletions
diff --git a/etc/profile-m-z/noprofile.profile b/etc/profile-m-z/noprofile.profile index db4113f94..7d0e01d98 100644 --- a/etc/profile-m-z/noprofile.profile +++ b/etc/profile-m-z/noprofile.profile | |||
| @@ -1,17 +1,16 @@ | |||
| 1 | # This is the weakest possible firejail profile. | 1 | # This is the weakest possible firejail profile. |
| 2 | # If a program still fail with this profile, it is incompatible with firejail. | 2 | # If a program still fails with this profile, it is incompatible with firejail. |
| 3 | # (from https://gist.github.com/rusty-snake/bb234cb3e50e1e4e7429f29a7931cc72) | 3 | # (from https://gist.github.com/rusty-snake/bb234cb3e50e1e4e7429f29a7931cc72) |
| 4 | # | 4 | # |
| 5 | # Usage: | 5 | # Usage: |
| 6 | # 1. download | 6 | # $ firejail --profile=noprofile.profile /path/to/program |
| 7 | # 2. firejail --profile=noprofile.profile /path/to/program | ||
| 8 | 7 | ||
| 9 | # Keep in mind that even with this profile some things are done | 8 | # Keep in mind that even with this profile some things are done |
| 10 | # which can break the program. | 9 | # which can break the program: |
| 11 | # - some env-vars are cleared | 10 | # - some env-vars are cleared; |
| 12 | # - /etc/firejail/firejail.config can contain options such as 'force-nonewprivs yes' | 11 | # - /etc/firejail/firejail.config can contain options such as 'force-nonewprivs yes'; |
| 13 | # - a new private pid-namespace is created | 12 | # - a new private pid-namespace is created; |
| 14 | # - a minimal hardcoded blacklist is applied | 13 | # - a minimal hardcoded blacklist is applied; |
| 15 | # - ... | 14 | # - ... |
| 16 | 15 | ||
| 17 | noblacklist /sys/fs | 16 | noblacklist /sys/fs |