aboutsummaryrefslogtreecommitdiffstats
path: root/src/man/firejail.1.in
diff options
context:
space:
mode:
Diffstat (limited to 'src/man/firejail.1.in')
-rw-r--r--src/man/firejail.1.in16
1 files changed, 8 insertions, 8 deletions
diff --git a/src/man/firejail.1.in b/src/man/firejail.1.in
index 6548b8e5d..618b4955e 100644
--- a/src/man/firejail.1.in
+++ b/src/man/firejail.1.in
@@ -1241,25 +1241,25 @@ Enforce the Landlock ruleset.
1241Without it, the other Landlock commands have no effect. 1241Without it, the other Landlock commands have no effect.
1242See the \fBLANDLOCK\fR section for more information. 1242See the \fBLANDLOCK\fR section for more information.
1243.TP 1243.TP
1244\fB\-\-landlock.read=path 1244\fB\-\-landlock.fs.read=path
1245Create a Landlock ruleset (if it doesn't already exist) and add a read access 1245Create a Landlock ruleset (if it doesn't already exist) and add a read access
1246rule for path. 1246rule for path.
1247.TP 1247.TP
1248\fB\-\-landlock.write=path 1248\fB\-\-landlock.fs.write=path
1249Create a Landlock ruleset (if it doesn't already exist) and add a write access 1249Create a Landlock ruleset (if it doesn't already exist) and add a write access
1250rule for path. 1250rule for path.
1251.TP 1251.TP
1252\fB\-\-landlock.makeipc=path 1252\fB\-\-landlock.fs.makeipc=path
1253Create a Landlock ruleset (if it doesn't already exist) and add a rule that 1253Create a Landlock ruleset (if it doesn't already exist) and add a rule that
1254allows the creation of named pipes (FIFOs) and Unix domain sockets beneath 1254allows the creation of named pipes (FIFOs) and Unix domain sockets beneath
1255the given path. 1255the given path.
1256.TP 1256.TP
1257\fB\-\-landlock.makedev=path 1257\fB\-\-landlock.fs.makedev=path
1258Create a Landlock ruleset (if it doesn't already exist) and add a rule that 1258Create a Landlock ruleset (if it doesn't already exist) and add a rule that
1259allows the creation of block devices and character devices beneath the given 1259allows the creation of block devices and character devices beneath the given
1260path. 1260path.
1261.TP 1261.TP
1262\fB\-\-landlock.execute=path 1262\fB\-\-landlock.fs.execute=path
1263Create a Landlock ruleset (if it doesn't already exist) and add an execution 1263Create a Landlock ruleset (if it doesn't already exist) and add an execution
1264permission rule for path. 1264permission rule for path.
1265.br 1265.br
@@ -1267,8 +1267,8 @@ permission rule for path.
1267.br 1267.br
1268Example: 1268Example:
1269.br 1269.br
1270$ firejail \-\-landlock.read=/ \-\-landlock.write=/home 1270$ firejail \-\-landlock.fs.read=/ \-\-landlock.fs.write=/home
1271\-\-landlock.execute=/usr \-\-landlock.enforce 1271\-\-landlock.fs.execute=/usr \-\-landlock.enforce
1272#endif 1272#endif
1273.TP 1273.TP
1274\fB\-\-list 1274\fB\-\-list
@@ -3404,7 +3404,7 @@ features, pass \fB\-\-landlock.enforce\fR flag to Firejail command line.
3404Without it, the other Landlock commands have no effect. 3404Without it, the other Landlock commands have no effect.
3405Example: 3405Example:
3406.PP 3406.PP
3407$ firejail \-\-landlock.enforce \-\-landlock.read=/media mc 3407$ firejail \-\-landlock.enforce \-\-landlock.fs.read=/media mc
3408.PP 3408.PP
3409To disable Landlock self-restriction, use \fB\-\-ignore=landlock.enforce\fR. 3409To disable Landlock self-restriction, use \fB\-\-ignore=landlock.enforce\fR.
3410#endif 3410#endif