diff options
Diffstat (limited to 'src/firejail/arg-checking.txt')
| -rw-r--r-- | src/firejail/arg-checking.txt | 85 |
1 files changed, 85 insertions, 0 deletions
diff --git a/src/firejail/arg-checking.txt b/src/firejail/arg-checking.txt new file mode 100644 index 000000000..c1ab2cb21 --- /dev/null +++ b/src/firejail/arg-checking.txt | |||
| @@ -0,0 +1,85 @@ | |||
| 1 | arg checking: | ||
| 2 | |||
| 3 | 1. --output=filename | ||
| 4 | - not supported in profiles | ||
| 5 | - checking no "..", | ||
| 6 | - checking no link, | ||
| 7 | - checking no dir, | ||
| 8 | - checking same permissions, | ||
| 9 | - checking no hard links | ||
| 10 | - unit test | ||
| 11 | |||
| 12 | 2. --chroot=dirname | ||
| 13 | - not supported in profiles | ||
| 14 | - expand "~" | ||
| 15 | - checking no "..", | ||
| 16 | - checking is dir, | ||
| 17 | - checking no link | ||
| 18 | - checking directory structure | ||
| 19 | - unit test | ||
| 20 | |||
| 21 | 3. --bind=dirname1,dirname2, --bind=filename1,filenam2 | ||
| 22 | - supported in profiles | ||
| 23 | - accepted only when running as root | ||
| 24 | - checking string chars | ||
| 25 | - checking no ".." | ||
| 26 | - unit test non root | ||
| 27 | |||
| 28 | 4. --tmpfs=dirname | ||
| 29 | - supported in profiles | ||
| 30 | - checking string chars | ||
| 31 | - checking no ".." | ||
| 32 | - unit test | ||
| 33 | |||
| 34 | 5. --blacklist=filename, --blacklist=dirname | ||
| 35 | - supported in profiles | ||
| 36 | - checking string chars | ||
| 37 | - checking no ".." | ||
| 38 | - unit test | ||
| 39 | |||
| 40 | 6. --read-only=filename, --read-only=dirname | ||
| 41 | - supported in profiles | ||
| 42 | - checking string chars | ||
| 43 | - checking no ".." | ||
| 44 | - unit test | ||
| 45 | |||
| 46 | 7. --profile=filename | ||
| 47 | - check access as real GID/UID | ||
| 48 | - checking no dir | ||
| 49 | - checking no link | ||
| 50 | - checking no ".." | ||
| 51 | - unit test | ||
| 52 | |||
| 53 | 8. --private=dirname | ||
| 54 | - supported in profiles | ||
| 55 | - expand "~" | ||
| 56 | - check is dir | ||
| 57 | - check no link | ||
| 58 | - checking no ".." | ||
| 59 | - check same owner | ||
| 60 | - unit test | ||
| 61 | |||
| 62 | 9. --private.keep=filelist | ||
| 63 | - supported in profiles | ||
| 64 | - checking no ".." | ||
| 65 | - checking file found | ||
| 66 | - checking same owner | ||
| 67 | - checking no link | ||
| 68 | - unit test | ||
| 69 | |||
| 70 | 10. --netfilter=filename | ||
| 71 | - supported in profiles | ||
| 72 | - check access as real GID/UID | ||
| 73 | - checking no dir | ||
| 74 | - checking no link | ||
| 75 | - checking no ".." | ||
| 76 | - unit test | ||
| 77 | |||
| 78 | 11. --shell=filename | ||
| 79 | - not supported in profiles | ||
| 80 | - check access as real GID/UID | ||
| 81 | - checking no dir | ||
| 82 | - checking no link | ||
| 83 | - checking no ".." | ||
| 84 | - unit test | ||
| 85 | |||