From 80868ffa70784fae2642c3d9219e08a17822bc86 Mon Sep 17 00:00:00 2001 From: netblue30 Date: Tue, 23 Feb 2021 08:40:02 -0500 Subject: jailtest --- src/man/firecfg.txt | 11 +++++---- src/man/firejail-login.txt | 11 +++++---- src/man/firejail-profile.txt | 12 +++++---- src/man/firejail-users.txt | 11 +++++---- src/man/firejail.txt | 12 +++++---- src/man/firemon.txt | 11 +++++---- src/man/jailtest.txt | 58 +++++++++++++++++++++++++++++++------------- 7 files changed, 79 insertions(+), 47 deletions(-) (limited to 'src/man') diff --git a/src/man/firecfg.txt b/src/man/firecfg.txt index 2c02aee47..dbb9397c6 100644 --- a/src/man/firecfg.txt +++ b/src/man/firecfg.txt @@ -130,8 +130,9 @@ This program is free software; you can redistribute it and/or modify it under th .PP Homepage: https://firejail.wordpress.com .SH SEE ALSO -\&\flfirejail\fR\|(1), -\&\flfiremon\fR\|(1), -\&\flfirejail-profile\fR\|(5), -\&\flfirejail-login\fR\|(5) -\&\flfirejail-users\fR\|(5) +.BR firejail (1), +.BR firemon (1), +.BR firejail-profile (5), +.BR firejail-login (5), +.BR firejail-users (5), +.BR jailtest (1) diff --git a/src/man/firejail-login.txt b/src/man/firejail-login.txt index 430e86cc8..ce27729b7 100644 --- a/src/man/firejail-login.txt +++ b/src/man/firejail-login.txt @@ -34,8 +34,9 @@ Firejail is free software; you can redistribute it and/or modify it under the te .PP Homepage: https://firejail.wordpress.com .SH SEE ALSO -\&\flfirejail\fR\|(1), -\&\flfiremon\fR\|(1), -\&\flfirecfg\fR\|(1), -\&\flfirejail-profile\fR\|(5) -\&\flfirejail-users\fR\|(5) +.BR firejail (1), +.BR firemon (1), +.BR firecfg (1), +.BR firejail-profile (5), +.BR firejail-users (5), +.BR jailtest (1) diff --git a/src/man/firejail-profile.txt b/src/man/firejail-profile.txt index 5e77b5f70..c7dc4c434 100644 --- a/src/man/firejail-profile.txt +++ b/src/man/firejail-profile.txt @@ -889,10 +889,12 @@ Firejail is free software; you can redistribute it and/or modify it under the te .PP Homepage: https://firejail.wordpress.com .SH SEE ALSO -\&\flfirejail\fR\|(1), -\&\flfiremon\fR\|(1), -\&\flfirecfg\fR\|(1), -\&\flfirejail-login\fR\|(5), -\&\flfirejail-users\fR\|(5), +.BR firejail (1), +.BR firemon (1), +.BR firecfg (1), +.BR firejail-login (5), +.BR firejail-users (5), +.BR jailtest (1) + .UR https://github.com/netblue30/firejail/wiki/Creating-Profiles .UE diff --git a/src/man/firejail-users.txt b/src/man/firejail-users.txt index 6fa09e05e..c5a9c1848 100644 --- a/src/man/firejail-users.txt +++ b/src/man/firejail-users.txt @@ -54,8 +54,9 @@ as published by the Free Software Foundation; either version 2 of the License, o .PP Homepage: https://firejail.wordpress.com .SH SEE ALSO -\&\flfirejail\fR\|(1), -\&\flfiremon\fR\|(1), -\&\flfirecfg\fR\|(1), -\&\flfirejail-profile\fR\|(5) -\&\flfirejail-login\fR\|(5) +.BR firejail (1), +.BR firemon (1), +.BR firecfg (1), +.BR firejail-profile (5), +.BR firejail-login (5), +.BR jailtest (1) diff --git a/src/man/firejail.txt b/src/man/firejail.txt index e85a02ee8..9e89d4e79 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt @@ -3332,11 +3332,13 @@ This program is free software; you can redistribute it and/or modify it under th .PP Homepage: https://firejail.wordpress.com .SH SEE ALSO -\&\flfiremon\fR\|(1), -\&\flfirecfg\fR\|(1), -\&\flfirejail-profile\fR\|(5), -\&\flfirejail-login\fR\|(5), -\&\flfirejail-users\fR\|(5), +.BR firemon (1), +.BR firecfg (1), +.BR firejail-profile (5), +.BR firejail-login (5), +.BR firejail-users (5), +.BR jailtest (1) + .UR https://github.com/netblue30/firejail/wiki .UE , .UR https://github.com/netblue30/firejail diff --git a/src/man/firemon.txt b/src/man/firemon.txt index cea6c0265..64f15a1f0 100644 --- a/src/man/firemon.txt +++ b/src/man/firemon.txt @@ -115,8 +115,9 @@ This program is free software; you can redistribute it and/or modify it under th .PP Homepage: https://firejail.wordpress.com .SH SEE ALSO -\&\flfirejail\fR\|(1), -\&\flfirecfg\fR\|(1), -\&\flfirejail-profile\fR\|(5), -\&\flfirejail-login\fR\|(5) -\&\flfirejail-users\fR\|(5) +.BR firejail (1), +.BR firecfg (1), +.BR firejail-profile (5), +.BR firejail-login (5), +.BR firejail-users (5), +.BR jailtest (1) diff --git a/src/man/jailtest.txt b/src/man/jailtest.txt index bc1999163..1b64097ea 100644 --- a/src/man/jailtest.txt +++ b/src/man/jailtest.txt @@ -19,9 +19,12 @@ and tries to run them form inside the sandbox, thus testing if the directory is \fB3. Read access test jailtest creates test files in the directories specified by the user and tries to read them from inside the sandbox. - .TP -The program is running as root exclusively under sudo. +\fB4. AppArmor test +.TP +\fB5. Seccomp test +.TP +The program is started as root using sudo. .SH OPTIONS .TP @@ -35,7 +38,7 @@ Print options end exit. Print program version and exit. .TP \fB[directory] -One or more directories in user home to test for read access. +One or more directories in user home to test for read access. ~/.ssh and ~/.gnupg are tested by default. .SH OUTPUT For each sandbox detected we print the following line: @@ -46,37 +49,58 @@ It is followed by relevant sandbox information, such as the virtual directories .SH EXAMPLE +$ sudo jailtest .br -$ sudo jailtest ~/.ssh ~/.gnupg +2014:netblue::firejail /usr/bin/gimp .br -1429:netblue::/usr/bin/firejail /opt/firefox/firefox + Virtual dirs: /tmp, /var/tmp, /dev, /usr/share, .br - Virtual dirs: /home/netblue, /tmp, /var/tmp, /dev, /etc, + Warning: I can run programs in /home/netblue +.br + .br -5602:netblue::/usr/bin/firejail /usr/bin/ssh netblue@x.y.z.net +2055:netblue::firejail /usr/bin/ssh -X netblue@x.y.z.net .br - Virtual dirs: /var/tmp, /dev, + Virtual dirs: /var/tmp, /dev, /usr/share, /run/user/1000, .br Warning: I can read ~/.ssh .br -5926:netblue::/usr/bin/firejail /usr/bin/gimp-2.10 + +.br +2186:netblue:libreoffice:firejail --appimage /opt/LibreOffice-fresh.appimage .br Virtual dirs: /tmp, /var/tmp, /dev, .br - Warning: I can run programs in /home/netblue + .br -6394:netblue:libreoffice:/usr/bin/firejail libreoffice +26090:netblue::/usr/bin/firejail /opt/firefox/firefox .br - Virtual dirs: /tmp, /var/tmp, /dev, + Virtual dirs: /home/netblue, /tmp, /var/tmp, /dev, /etc, /usr/share, .br + /run/user/1000, +.br + +.br +26160:netblue:tor:firejail --private=~/tor-browser_en-US ./start-tor +.br + Warning: AppArmor not enabled +.br + Virtual dirs: /home/netblue, /tmp, /var/tmp, /dev, /etc, /bin, +.br + /usr/share, /run/user/1000, +.br + Warning: I can run programs in /home/netblue +.br + .SH LICENSE This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. .PP Homepage: https://firejail.wordpress.com .SH SEE ALSO -\&\flfirejail\fR\|(1), -\&\flfirecfg\fR\|(1), -\&\flfirejail-profile\fR\|(5), -\&\flfirejail-login\fR\|(5) -\&\flfirejail-users\fR\|(5) +.BR firejail (1), +.BR firemon (1), +.BR firecfg (1), +.BR firejail-profile (5), +.BR firejail-login (5), +.BR firejail-users (5), -- cgit v1.2.3-54-g00ecf