From 3a4d7acdf2213778daa18ce98c94905bc87982ed Mon Sep 17 00:00:00 2001 From: root Date: Thu, 14 Jan 2016 11:15:59 -0500 Subject: --join fixes --- src/man/firejail.txt | 13 ++++++++++--- 1 file changed, 10 insertions(+), 3 deletions(-) (limited to 'src/man') diff --git a/src/man/firejail.txt b/src/man/firejail.txt index 75e962b56..895b7a3af 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt @@ -495,7 +495,11 @@ $ firejail \-\-ipc-namespace firefox .TP \fB\-\-join=name Join the sandbox identified by name. By default a /bin/bash shell is started after joining the sandbox. -If a program is specified, the program is run in the sandbox. +If a program is specified, the program is run in the sandbox. If \-\-join command is issued as a regular user, +all security filters are configured for the new process the same they are configured in the sandbox. +If \-\-join command is issued as root, the security filters, cgroups and cpus configurations are not applied +to the process joining the sandbox. + .br .br @@ -510,8 +514,11 @@ $ firejail \-\-join=mygame .TP \fB\-\-join=pid -Join the sandbox identified by PID. By default a /bin/bash shell is started after joining the sandbox. -If a program is specified, the program is run in the sandbox. +Join the sandbox identified by process ID. By default a /bin/bash shell is started after joining the sandbox. +If a program is specified, the program is run in the sandbox. If \-\-join command is issued as a regular user, +all security filters are configured for the new process the same they are configured in the sandbox. +If \-\-join command is issued as root, the security filters, cgroups and cpus configurations are not applied +to the process joining the sandbox. .br .br -- cgit v1.2.3-70-g09d2