From c10766c01947793679462beb998ccde6e37107b7 Mon Sep 17 00:00:00 2001 From: netblue30 Date: Sun, 25 Sep 2016 12:04:59 -0400 Subject: allusers support in profile files --- src/firejail/profile.c | 4 ++++ src/man/firejail-profile.txt | 4 ++++ 2 files changed, 8 insertions(+) (limited to 'src') diff --git a/src/firejail/profile.c b/src/firejail/profile.c index 73b655379..33029a86b 100644 --- a/src/firejail/profile.c +++ b/src/firejail/profile.c @@ -181,6 +181,10 @@ int profile_check_line(char *ptr, int lineno, const char *fname) { #endif return 0; } + else if (strcmp(ptr, "allusers") == 0) { + arg_allusers = 1; + return 0; + } else if (strcmp(ptr, "private-dev") == 0) { arg_private_dev = 1; return 0; diff --git a/src/man/firejail-profile.txt b/src/man/firejail-profile.txt index 68420ae9d..3e415c2cc 100644 --- a/src/man/firejail-profile.txt +++ b/src/man/firejail-profile.txt @@ -321,6 +321,10 @@ Set a nice value of -5 to all processes running inside the sandbox. The sandbox is placed in g1 control group. .SH User Environment +.TP +\fBallusers +All user home directories are visible inside the sandbox. By default, only current user home directory is visible. + .TP \fBname sandboxname Set sandbox name. Example: -- cgit v1.2.3-70-g09d2