aboutsummaryrefslogtreecommitdiffstats
path: root/src/man/firejail-profile.txt
diff options
context:
space:
mode:
Diffstat (limited to 'src/man/firejail-profile.txt')
-rw-r--r--src/man/firejail-profile.txt23
1 files changed, 12 insertions, 11 deletions
diff --git a/src/man/firejail-profile.txt b/src/man/firejail-profile.txt
index e91c5c089..3ebb11549 100644
--- a/src/man/firejail-profile.txt
+++ b/src/man/firejail-profile.txt
@@ -39,7 +39,7 @@ Reading profile /home/netblue/.config/firejail/icecat.profile
39\fB3.\fR Use a default.profile file if the sandbox 39\fB3.\fR Use a default.profile file if the sandbox
40is started by a regular user, or a server.profile file if the sandbox 40is started by a regular user, or a server.profile file if the sandbox
41is started by root. Firejail looks for these files in ~/.config/firejail directory, followed by /etc/firejail directory. 41is started by root. Firejail looks for these files in ~/.config/firejail directory, followed by /etc/firejail directory.
42To disable default profile loading, use --noroot command option. Example: 42To disable default profile loading, use --noprofile command option. Example:
43.PP 43.PP
44.RS 44.RS
45$ firejail 45$ firejail
@@ -126,7 +126,7 @@ blacklist ${HOME}/.ssh
126Make directory or file read-only. 126Make directory or file read-only.
127.TP 127.TP
128\fBtmpfs directory 128\fBtmpfs directory
129Mount an empty tmpfs filesystem on top of directory. 129Mount an empty tmpfs filesystem on top of directory. This option is available only when running the sandbox as root.
130.TP 130.TP
131\fBbind directory1,directory2 131\fBbind directory1,directory2
132Mount-bind directory1 on top of directory2. This option is only available when running as root. 132Mount-bind directory1 on top of directory2. This option is only available when running as root.
@@ -139,18 +139,12 @@ Mount new /root and /home/user directories in temporary
139filesystems. All modifications are discarded when the sandbox is 139filesystems. All modifications are discarded when the sandbox is
140closed. 140closed.
141.TP 141.TP
142\fBprivate-bin file,file
143Build a new /bin in a temporary filesystem, and copy the programs in the list.
144The same directory is also bind-mounted over /sbin, /usr/bin and /usr/sbin.
145.TP
146\fBprivate directory 142\fBprivate directory
147Use directory as user home. 143Use directory as user home.
148.TP 144.TP
149\fBprivate-home file,directory 145\fBprivate-bin file,file
150Build a new user home in a temporary 146Build a new /bin in a temporary filesystem, and copy the programs in the list.
151filesystem, and copy the files and directories in the list in the 147The same directory is also bind-mounted over /sbin, /usr/bin and /usr/sbin.
152new home. All modifications are discarded when the sandbox is
153closed.
154.TP 148.TP
155\fBprivate-dev 149\fBprivate-dev
156Create a new /dev directory. Only dri, null, full, zero, tty, pts, ptmx, random, urandom, log and shm devices are available. 150Create a new /dev directory. Only dri, null, full, zero, tty, pts, ptmx, random, urandom, log and shm devices are available.
@@ -160,6 +154,9 @@ Build a new /etc in a temporary
160filesystem, and copy the files and directories in the list. 154filesystem, and copy the files and directories in the list.
161All modifications are discarded when the sandbox is closed. 155All modifications are discarded when the sandbox is closed.
162.TP 156.TP
157\fBprivate-tmp
158Mount an empty temporary filesystem on top of /tmp directory.
159.TP
163\fBwhitelist file_or_directory 160\fBwhitelist file_or_directory
164Build a new user home in a temporary filesystem, and mount-bind file_or_directory. 161Build a new user home in a temporary filesystem, and mount-bind file_or_directory.
165The modifications to file_or_directory are persistent, everything else is discarded 162The modifications to file_or_directory are persistent, everything else is discarded
@@ -231,6 +228,10 @@ Set the CPU cores available for this sandbox using \fBcpu\fR command. Examples:
231cpu 1,2,3 228cpu 1,2,3
232Use only CPU cores 0, 1 and 2. 229Use only CPU cores 0, 1 and 2.
233 230
231.TP
232nice -5
233Set a nice value of -5 to all processes running inside the sandbox.
234
234.SH Control Groups 235.SH Control Groups
235Place the sandbox in an existing control group specified by the full path of the task file using \fBcgroup\fR. Example: 236Place the sandbox in an existing control group specified by the full path of the task file using \fBcgroup\fR. Example:
236 237