From 7c1ed2fb0525cb1f1dcb5e08bf52756b7ac863ed Mon Sep 17 00:00:00 2001 From: netblue30 Date: Wed, 30 Nov 2016 12:59:48 -0500 Subject: private-opt, private-srv --- src/man/firejail-profile.txt | 12 +++++++++++- src/man/firejail.txt | 26 ++++++++++++++++++++++++++ 2 files changed, 37 insertions(+), 1 deletion(-) (limited to 'src/man') diff --git a/src/man/firejail-profile.txt b/src/man/firejail-profile.txt index d6113218c..007374c75 100644 --- a/src/man/firejail-profile.txt +++ b/src/man/firejail-profile.txt @@ -181,7 +181,7 @@ closed. \fBprivate directory Use directory as user home. .TP -\f\private-home file,directory +\fBprivate-home file,directory Build a new user home in a temporary filesystem, and copy the files and directories in the list in the new home. All modifications are discarded when the sandbox is @@ -199,6 +199,16 @@ Build a new /etc in a temporary filesystem, and copy the files and directories in the list. All modifications are discarded when the sandbox is closed. .TP +\fBprivate-opt file,directory +Build a new /optin a temporary +filesystem, and copy the files and directories in the list. +All modifications are discarded when the sandbox is closed. +.TP +\fBprivate-srv file,directory +Build a new /srv in a temporary +filesystem, and copy the files and directories in the list. +All modifications are discarded when the sandbox is closed. +.TP \fBprivate-tmp Mount an empty temporary filesystem on top of /tmp directory whitelisting /tmp/.X11-unix. .TP diff --git a/src/man/firejail.txt b/src/man/firejail.txt index 8441f25d5..450f30c68 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt @@ -1178,6 +1178,32 @@ $ firejail --private-etc=group,hostname,localtime, \\ .br nsswitch.conf,passwd,resolv.conf +.TP +\fB\-\-private-opt=file,directory +Build a new /opt in a temporary +filesystem, and copy the files and directories in the list. +If no listed file is found, /opt directory will be empty. +All modifications are discarded when the sandbox is closed. +.br + +.br +Example: +.br +$ firejail --private-opt=firefox /opt/firefox/firefox + +.TP +\fB\-\-private-srv=file,directory +Build a new /srv in a temporary +filesystem, and copy the files and directories in the list. +If no listed file is found, /srv directory will be empty. +All modifications are discarded when the sandbox is closed. +.br + +.br +Example: +.br +# firejail --private-srv=www /etc/init.d/apache2 start + .TP \fB\-\-private-tmp Mount an empty temporary filesystem on top of /tmp directory whitelisting /tmp/.X11-unix. -- cgit v1.2.3-54-g00ecf