aboutsummaryrefslogtreecommitdiffstats
path: root/src/man/firejail.txt
diff options
context:
space:
mode:
Diffstat (limited to 'src/man/firejail.txt')
-rw-r--r--src/man/firejail.txt16
1 files changed, 14 insertions, 2 deletions
diff --git a/src/man/firejail.txt b/src/man/firejail.txt
index 00481d4d3..2303a8bbd 100644
--- a/src/man/firejail.txt
+++ b/src/man/firejail.txt
@@ -146,7 +146,7 @@ $ firejail "\-\-blacklist=/home/username/My Virtual Machines"
146$ firejail \-\-blacklist=/home/username/My\\ Virtual\\ Machines 146$ firejail \-\-blacklist=/home/username/My\\ Virtual\\ Machines
147.TP 147.TP
148\fB\-\-build 148\fB\-\-build
149The command builds a whitelisted profile. If /usr/bin/strace is installed on the system, it also 149The command builds a whitelisted profile. The profile is printed on the screen. If /usr/bin/strace is installed on the system, it also
150builds a whitelisted seccomp profile. The program is run in a very relaxed sandbox, 150builds a whitelisted seccomp profile. The program is run in a very relaxed sandbox,
151with only --caps.drop=all and --nonewprivs. Programs that raise user privileges are not supported 151with only --caps.drop=all and --nonewprivs. Programs that raise user privileges are not supported
152in order to allow strace to run. Chromium and Chromium-based browsers will not work. 152in order to allow strace to run. Chromium and Chromium-based browsers will not work.
@@ -155,7 +155,19 @@ in order to allow strace to run. Chromium and Chromium-based browsers will not w
155.br 155.br
156Example: 156Example:
157.br 157.br
158$ firejail --build vlc ~/Videos/test.mp4 158$ firejail --build=profile-file vlc ~/Videos/test.mp4
159.TP
160\fB\-\-build=profile-file
161The command builds a whitelisted profile, and saves it in profile-file. If /usr/bin/strace is installed on the system, it also
162builds a whitelisted seccomp profile. The program is run in a very relaxed sandbox,
163with only --caps.drop=all and --nonewprivs. Programs that raise user privileges are not supported
164in order to allow strace to run. Chromium and Chromium-based browsers will not work.
165.br
166
167.br
168Example:
169.br
170$ firejail --build=vlc.profile vlc ~/Videos/test.mp4
159.TP 171.TP
160\fB\-c 172\fB\-c
161Execute command and exit. 173Execute command and exit.