From 022af61cb4c3163de774cdfead74bd5811d8b81b Mon Sep 17 00:00:00 2001 From: netblue30 Date: Sat, 9 Oct 2021 10:39:38 -0400 Subject: moving out of youtube, and some cleanup --- README.md | 84 ++++++++++++++++++++++++--------------------------------------- 1 file changed, 32 insertions(+), 52 deletions(-) (limited to 'README.md') diff --git a/README.md b/README.md index 40c6e9d98..aa0dd013e 100644 --- a/README.md +++ b/README.md @@ -22,43 +22,23 @@ implemented directly in Linux kernel and available on any Linux computer. - - - - -
-
Firejail Intro
+ +
Introduction
-
Firejail Demo
+ +
Technology
-
Debian Install
+ +
Deep Dive
-
Arch Linux Install
- -
-
Disable Network Access
- -
-
Firejail Security Deep Dive
- -
Project webpage: https://firejail.wordpress.com/ @@ -239,30 +219,30 @@ A small tool to print profile statistics. Compile as usual and run in /etc/profi $ sudo cp src/profstats/profstats /etc/firejail/. $ cd /etc/firejail $ ./profstats *.profile - profiles 1150 - include local profile 1150 (include profile-name.local) - include globals 1120 (include globals.local) - blacklist ~/.ssh 1026 (include disable-common.inc) - seccomp 1050 - capabilities 1146 - noexec 1030 (include disable-exec.inc) - noroot 959 - memory-deny-write-execute 253 - apparmor 681 - private-bin 667 - private-dev 1009 - private-etc 523 - private-tmp 883 - whitelist home directory 547 - whitelist var 818 (include whitelist-var-common.inc) - whitelist run/user 616 (include whitelist-runuser-common.inc + profiles 1167 + include local profile 1167 (include profile-name.local) + include globals 1136 (include globals.local) + blacklist ~/.ssh 1042 (include disable-common.inc) + seccomp 1062 + capabilities 1163 + noexec 1049 (include disable-exec.inc) + noroot 971 + memory-deny-write-execute 256 + apparmor 693 + private-bin 677 + private-dev 1027 + private-etc 532 + private-tmp 897 + whitelist home directory 557 + whitelist var 836 (include whitelist-var-common.inc) + whitelist run/user 1137 (include whitelist-runuser-common.inc or blacklist ${RUNUSER}) - whitelist usr/share 591 (include whitelist-usr-share-common.inc - net none 391 - dbus-user none 641 - dbus-user filter 105 - dbus-system none 792 - dbus-system filter 7 + whitelist usr/share 609 (include whitelist-usr-share-common.inc + net none 396 + dbus-user none 656 + dbus-user filter 108 + dbus-system none 808 + dbus-system filter 10 ``` ### New profiles: -- cgit v1.2.3-54-g00ecf