From f7e9fa48ce11feef04160a8031894d385a27ccf7 Mon Sep 17 00:00:00 2001 From: smitsohu Date: Mon, 18 Oct 2021 17:24:55 +0200 Subject: man pages --- src/man/firejail.txt | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/src/man/firejail.txt b/src/man/firejail.txt index 154def585..e724e4bb9 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt @@ -310,6 +310,11 @@ regular user, nonewprivs and a default capabilities filter are enabled. Example: .br $ firejail \-\-chroot=/media/ubuntu warzone2100 +.br + +.br +For automatic mounting of X11 and PulseAudio sockets set environment variables +FIREJAIL_CHROOT_X11 and FIREJAIL_CHROOT_PULSE. #endif .TP \fB\-\-cpu=cpu-number,cpu-number,cpu-number @@ -2191,6 +2196,11 @@ system call groups are defined: @aio, @basic-io, @chown, @clock, More information about groups can be found in /usr/share/doc/firejail/syscalls.txt .br +.br +The default list can be customized, see \-\-seccomp= for a description. +It can be customized also globally in /etc/firejail/firejail.config file. +.br + .br System architecture is strictly imposed only if flag \-\-seccomp.block-secondary is used. The filter is applied at run time @@ -2206,11 +2216,7 @@ Firejail will print seccomp violations to the audit log if the kernel was compil Example: .br $ firejail \-\-seccomp -.br -.br -The default list can be customized, see \-\-seccomp= for a description. It can be customized -also globally in /etc/firejail/firejail.config file. .TP \fB\-\-seccomp=syscall,@group,!syscall2 -- cgit v1.2.3-70-g09d2