From d0a12f27d650ebed63f14102baa671f3655b50c8 Mon Sep 17 00:00:00 2001 From: Antoine Catton Date: Mon, 30 Jan 2023 23:55:49 +0100 Subject: feature: add 'keep-shell-rc' flag and option This fixes #1127. This allow a user to provide their own zshrc/bashrc inside the jail. This is very useful when using firejail to develop and prevent bad pip packages to access your system. --- src/zsh_completion/_firejail.in | 1 + 1 file changed, 1 insertion(+) (limited to 'src/zsh_completion/_firejail.in') diff --git a/src/zsh_completion/_firejail.in b/src/zsh_completion/_firejail.in index 2b67c2a00..37ce7055b 100644 --- a/src/zsh_completion/_firejail.in +++ b/src/zsh_completion/_firejail.in @@ -104,6 +104,7 @@ _firejail_args=( '--keep-config-pulse[disable automatic ~/.config/pulse init]' '--keep-dev-shm[/dev/shm directory is untouched (even with --private-dev)]' '--keep-fd[inherit open file descriptors to sandbox]: :' + '--keep-shell-rc[do not copy shell rc files from /etc/skel]' '--keep-var-tmp[/var/tmp directory is untouched]' '--machine-id[spoof /etc/machine-id with a random id]' '--memory-deny-write-execute[seccomp filter to block attempts to create memory mappings that are both writable and executable]' -- cgit v1.2.3-70-g09d2