aboutsummaryrefslogtreecommitdiffstats
path: root/src/man/firejail.txt
diff options
context:
space:
mode:
Diffstat (limited to 'src/man/firejail.txt')
-rw-r--r--src/man/firejail.txt30
1 files changed, 22 insertions, 8 deletions
diff --git a/src/man/firejail.txt b/src/man/firejail.txt
index 62225c407..e2382eb9f 100644
--- a/src/man/firejail.txt
+++ b/src/man/firejail.txt
@@ -52,7 +52,7 @@ Only /home and /tmp are writable.
52As it starts up, Firejail tries to find a security profile based on the name of the application. 52As it starts up, Firejail tries to find a security profile based on the name of the application.
53If an appropriate profile is not found, Firejail will use a default profile. 53If an appropriate profile is not found, Firejail will use a default profile.
54The default profile is quite restrictive. In case the application doesn't work, use --noprofile option 54The default profile is quite restrictive. In case the application doesn't work, use --noprofile option
55to disable it. For more information, please see SECURITY PROFILES section. 55to disable it. For more information, please see \fBSECURITY PROFILES\fR section.
56.PP 56.PP
57If a program argument is not specified, Firejail starts /bin/bash shell. 57If a program argument is not specified, Firejail starts /bin/bash shell.
58Examples: 58Examples:
@@ -69,10 +69,10 @@ $ firejail [OPTIONS] firefox # starting Mozilla Firefox
69Signal the end of options and disables further option processing. 69Signal the end of options and disables further option processing.
70.TP 70.TP
71\fB\-\-bandwidth=name 71\fB\-\-bandwidth=name
72Set bandwidth limits for the sandbox identified by name, see TRAFFIC SHAPING section for more details. 72Set bandwidth limits for the sandbox identified by name, see \fBTRAFFIC SHAPING\fR section for more details.
73.TP 73.TP
74\fB\-\-bandwidth=pid 74\fB\-\-bandwidth=pid
75Set bandwidth limits for the sandbox identified by PID, see TRAFFIC SHAPING section for more details. 75Set bandwidth limits for the sandbox identified by PID, see \fBTRAFFIC SHAPING\fR section for more details.
76.TP 76.TP
77\fB\-\-bind=dirname1,dirname2 77\fB\-\-bind=dirname1,dirname2
78Mount-bind dirname1 on top of dirname2. This option is only available when running the sandbox as root. 78Mount-bind dirname1 on top of dirname2. This option is only available when running the sandbox as root.
@@ -478,7 +478,7 @@ $ firejail \-\-join=3272
478 478
479.TP 479.TP
480\fB\-\-list 480\fB\-\-list
481List all sandboxes, see MONITORING section for more details. 481List all sandboxes, see \fBMONITORING\fR section for more details.
482.br 482.br
483 483
484.br 484.br
@@ -645,7 +645,7 @@ $ firejail --netfilter=/etc/firejail/nolocal.net \\
645--net=eth0 firefox 645--net=eth0 firefox
646.TP 646.TP
647\fB\-\-netstats 647\fB\-\-netstats
648Monitor network namespace statistics, see MONITORING section for more details. 648Monitor network namespace statistics, see \fBMONITORING\fR section for more details.
649.br 649.br
650 650
651.br 651.br
@@ -919,7 +919,7 @@ nsswitch.conf,passwd,resolv.conf
919.TP 919.TP
920\fB\-\-profile=filename 920\fB\-\-profile=filename
921Load a custom security profile from filename. For filename use an absolute path or a path relative to the current path. 921Load a custom security profile from filename. For filename use an absolute path or a path relative to the current path.
922For more information, see SECURITY PROFILES section below. 922For more information, see \fBSECURITY PROFILES\fR section below.
923.br 923.br
924 924
925.br 925.br
@@ -928,6 +928,20 @@ Example:
928$ firejail \-\-profile=myprofile 928$ firejail \-\-profile=myprofile
929 929
930.TP 930.TP
931\fB\-\-profile-path=directory
932Use this directory to look for profile files. Use an absolute path or a path in the home directory starting with ~/.
933For more information, see \fBSECURITY PROFILES\fR section below and \fBRELOCATING PROFILE FILES\fR in
934\fBman 5 firejail-profile\fR.
935.br
936
937.br
938Example:
939.br
940$ firejail \-\-profile-path=~/myprofiles
941.br
942$ firejail \-\-profile-path=/home/netblue/myprofiles
943
944.TP
931\fB\-\-protocol=protocol,protocol,protocol 945\fB\-\-protocol=protocol,protocol,protocol
932Enable protocol filter. The filter is based on seccomp and the first argument to socket system call. 946Enable protocol filter. The filter is based on seccomp and the first argument to socket system call.
933Recognized values: unix, inet, inet6, netlink and packet. 947Recognized values: unix, inet, inet6, netlink and packet.
@@ -1255,7 +1269,7 @@ Example:
1255$ firejail \-\-tmpfs=/var 1269$ firejail \-\-tmpfs=/var
1256.TP 1270.TP
1257\fB\-\-top 1271\fB\-\-top
1258Monitor the most CPU-intensive sandboxes, see MONITORING section for more details. 1272Monitor the most CPU-intensive sandboxes, see \fBMONITORING\fR section for more details.
1259.br 1273.br
1260 1274
1261.br 1275.br
@@ -1321,7 +1335,7 @@ Dec 3 11:46:17 debian firejail[70]: blacklist violation - sandbox 26370, exe fi
1321[...] 1335[...]
1322.TP 1336.TP
1323\fB\-\-tree 1337\fB\-\-tree
1324Print a tree of all sandboxed processes, see MONITORING section for more details. 1338Print a tree of all sandboxed processes, see \fBMONITORING\fR section for more details.
1325.br 1339.br
1326 1340
1327.br 1341.br