From b3f2318759905dd58bbdc93782ccf9d63322bf05 Mon Sep 17 00:00:00 2001 From: netblue30 Date: Sun, 17 Sep 2017 09:53:54 -0400 Subject: profile build tool --- src/man/firejail.txt | 12 ++++++++++++ 1 file changed, 12 insertions(+) (limited to 'src/man') diff --git a/src/man/firejail.txt b/src/man/firejail.txt index 2dd3abbb7..36ae3166b 100644 --- a/src/man/firejail.txt +++ b/src/man/firejail.txt @@ -154,6 +154,18 @@ $ firejail "\-\-blacklist=/home/username/My Virtual Machines" .br $ firejail \-\-blacklist=/home/username/My\\ Virtual\\ Machines .TP +\fB\-\-build +The command builds a whitelisted profile. If /usr/bin/strace is installed on the system, it also +builds a whitelisted seccomp profile. The program is run in a very relaxed sandbox, +with only --caps.drop=all and --nonewprivs. Only programs that don't rise privileges are supported +in order to allow strace to run. Chromium and Chromium-based browsers will not work. +.br + +.br +Example: +.br +$ firejail --build vlc ~/Videos/test.mp4 +.TP \fB\-c Execute command and exit. .TP -- cgit v1.2.3-70-g09d2