From 41d4e3d80b6e90807bcee8bdfc0fe5865ea8c890 Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Wed, 8 Apr 2020 18:06:35 +0000 Subject: add example for overriding individiual DBus filter to firejail-profile.txt See discussion in https://github.com/netblue30/firejail/pull/3326. --- src/man/firejail-profile.txt | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) (limited to 'src/man/firejail-profile.txt') diff --git a/src/man/firejail-profile.txt b/src/man/firejail-profile.txt index adde9a27f..2a4bb9c0b 100644 --- a/src/man/firejail-profile.txt +++ b/src/man/firejail-profile.txt @@ -496,6 +496,22 @@ Allow the application to talk to the name org.freedesktop.Notifications on the s .TP \fBnodbus \fR(deprecated) Disable D-Bus access (both system and session buses). Equivalent to dbus-system none and dbus-user none. +.br + +.br +Individual filters can be overridden via the \-\-ignore command. Supposing a profile has + +[...] +dbus-user filter +dbus-user.own org.mozilla.firefox.* +dbus-user.talk org.freedesktop.Notifications +dbus-system none +[...] + +and the user wants to disable notifications, this can be achieved by putting the below in a local override file: +[...] +ignore dbus-user.talk org.freedesktop.Notifications +[...] .SH Resource limits, CPU affinity, Control Groups These profile entries define the limits on system resources (rlimits) for the processes inside the sandbox. -- cgit v1.2.3-54-g00ecf