aboutsummaryrefslogtreecommitdiffstats
path: root/src/man/firejail.txt
diff options
context:
space:
mode:
Diffstat (limited to 'src/man/firejail.txt')
-rw-r--r--src/man/firejail.txt49
1 files changed, 35 insertions, 14 deletions
diff --git a/src/man/firejail.txt b/src/man/firejail.txt
index 00abc13db..d144fac10 100644
--- a/src/man/firejail.txt
+++ b/src/man/firejail.txt
@@ -61,11 +61,7 @@ $ firejail [OPTIONS] # starting a /bin/bash shell
61.PP 61.PP
62$ firejail [OPTIONS] firefox # starting Mozilla Firefox 62$ firejail [OPTIONS] firefox # starting Mozilla Firefox
63.PP 63.PP
64Multiple commands can be run in sandbox using regular bash logic operators: 64# sudo firejail [OPTIONS] /etc/init.d/nginx start
65.PP
66# sudo firejail [OPTIONS] "/etc/init.d/nginx start && sleep inf"
67.PP
68In the previous example, "sleep inf" command is required in order to keep the session open for the daemon program.
69 65
70.SH OPTIONS 66.SH OPTIONS
71.TP 67.TP
@@ -906,6 +902,37 @@ Example:
906.br 902.br
907$ firejail \-\-protocol=unix,inet,inet6 firefox 903$ firejail \-\-protocol=unix,inet,inet6 firefox
908.TP 904.TP
905\fB\-\-protocol.print=name
906Print the protocol filter for the sandbox identified by name.
907.br
908
909.br
910Example:
911.br
912$ firejail \-\-name=mybrowser firefox &
913.br
914[...]
915.br
916$ firejail \-\-print.print=mybrowser
917.br
918unix,inet,inet6,netlink
919
920.TP
921\fB\-\-protocol.print=pid
922Print the protocol filter for a sandbox identified by PID.
923.br
924
925.br
926Example:
927.br
928$ firejail \-\-list
929.br
9303272:netblue:firejail \-\-private firefox
931.br
932$ firejail \-\-protocol.print=3272
933.br
934unix,inet,inet6,netlink
935.TP
909\fB\-\-quiet 936\fB\-\-quiet
910Turn off Firejail's output. 937Turn off Firejail's output.
911.TP 938.TP
@@ -1411,10 +1438,10 @@ Reading profile /home/netblue/.config/firejail/icecat.profile
1411[...] 1438[...]
1412.RE 1439.RE
1413 1440
14143. Use a default.profile file if the sandbox 14413. Use default.profile file if the sandbox
1415is started by a regular user, or a server.profile file if the sandbox 1442is started by a regular user, or server.profile file if the sandbox
1416is started by root. Firejail looks for these files in ~/.config/firejail directory, followed by /etc/firejail directory. 1443is started by root. Firejail looks for these files in ~/.config/firejail directory, followed by /etc/firejail directory.
1417To disable default profile loading, use --noroot command option. Example: 1444To disable default profile loading, use --noprofile command option. Example:
1418.PP 1445.PP
1419.RS 1446.RS
1420$ firejail 1447$ firejail
@@ -1457,12 +1484,6 @@ Start a regular /bin/bash session in sandbox.
1457\f\firejail firefox 1484\f\firejail firefox
1458Start Mozilla Firefox. 1485Start Mozilla Firefox.
1459.TP 1486.TP
1460\f\firejail \-\-seccomp firefox
1461Start Mozilla Firefox in a seccomp sandbox.
1462.TP
1463\f\firejail \-\-caps firefox
1464Start Mozilla Firefox in a Linux capabilities sandbox.
1465.TP
1466\f\firejail \-\-debug firefox 1487\f\firejail \-\-debug firefox
1467Debug Firefox sandbox. 1488Debug Firefox sandbox.
1468.TP 1489.TP