diff options
Diffstat (limited to 'src/man/firejail.txt')
-rw-r--r-- | src/man/firejail.txt | 30 |
1 files changed, 28 insertions, 2 deletions
diff --git a/src/man/firejail.txt b/src/man/firejail.txt index 69d28c788..993186476 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt | |||
@@ -192,7 +192,7 @@ Define a custom blacklist Linux capabilities filter. | |||
192 | .br | 192 | .br |
193 | Example: | 193 | Example: |
194 | .br | 194 | .br |
195 | $ firejail \-\-caps.keep=net_broadcast,net_admin,net_raw | 195 | $ firejail \-\-caps.drop=net_broadcast,net_admin,net_raw |
196 | 196 | ||
197 | .TP | 197 | .TP |
198 | \fB\-\-caps.keep=capability,capability,capability | 198 | \fB\-\-caps.keep=capability,capability,capability |
@@ -469,6 +469,16 @@ Example: | |||
469 | $ firejail \-\-hostname=officepc firefox | 469 | $ firejail \-\-hostname=officepc firefox |
470 | 470 | ||
471 | .TP | 471 | .TP |
472 | \fB\-\-hosts-file=file | ||
473 | Use file as /etc/hosts. | ||
474 | .br | ||
475 | |||
476 | .br | ||
477 | Example: | ||
478 | .br | ||
479 | $ firejail \-\-hosts-file=~/myhosts firefox | ||
480 | |||
481 | .TP | ||
472 | \fB\-\-ignore=command | 482 | \fB\-\-ignore=command |
473 | Ignore command in profile file. | 483 | Ignore command in profile file. |
474 | .br | 484 | .br |
@@ -678,7 +688,7 @@ $ firejail \-\-net=eth0 \-\-mac=00:11:22:33:44:55 firefox | |||
678 | 688 | ||
679 | .TP | 689 | .TP |
680 | \fB\-\-machine-id | 690 | \fB\-\-machine-id |
681 | Preserve id number in /etc/machine-id file. By default a new random id is generated inside the sandbox. | 691 | Spoof id number in /etc/machine-id file - a new random id is generated inside the sandbox. |
682 | .br | 692 | .br |
683 | 693 | ||
684 | .br | 694 | .br |
@@ -761,6 +771,11 @@ Example: | |||
761 | $ firejail \-\-net=none vlc | 771 | $ firejail \-\-net=none vlc |
762 | 772 | ||
763 | .TP | 773 | .TP |
774 | \fB\-\-netns=name | ||
775 | Run the program in a named, persistent network namespace. These can | ||
776 | be created and configured using "ip netns". | ||
777 | |||
778 | .TP | ||
764 | \fB\-\-netfilter | 779 | \fB\-\-netfilter |
765 | Enable a default client network filter in the new network namespace. | 780 | Enable a default client network filter in the new network namespace. |
766 | New network namespaces are created using \-\-net option. If a new network namespaces is not created, | 781 | New network namespaces are created using \-\-net option. If a new network namespaces is not created, |
@@ -1710,6 +1725,17 @@ Example: | |||
1710 | .br | 1725 | .br |
1711 | $ sudo firejail --writable-var | 1726 | $ sudo firejail --writable-var |
1712 | 1727 | ||
1728 | .TP | ||
1729 | \fB\-\-writable-var-log | ||
1730 | Use the real /var/log directory, not a clone. By default, a tmpfs is mounted on top of /var/log | ||
1731 | directory, and a skeleton filesystem is created based on the original /var/log. | ||
1732 | .br | ||
1733 | |||
1734 | .br | ||
1735 | Example: | ||
1736 | .br | ||
1737 | $ sudo firejail --writable-var-log | ||
1738 | |||
1713 | 1739 | ||
1714 | .TP | 1740 | .TP |
1715 | \fB\-\-x11 | 1741 | \fB\-\-x11 |