1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
|
.TH FIREJAIL-CONFIG 5 "MONTH YEAR" "VERSION" "firejail.config man page"
.SH NAME
firejail.config \- Firejail run time configuration file
.SH DESCRIPTION
/etc/firejail/firejail.config is the system-wide configuration file for Firejail.
It allows the system administrator to enable or disable a number of
features and Linux kernel security technologies used by Firejail sandbox.
The file contains keyword-argument pairs, one per line.
Use 'yes' or 'no' as configuration values.
Note that some of these features can also be enabled or disabled at compile
time. Most features are enabled by default both at compile time and
at run time.
.TP
\fBsecomp
Enable or disable seccomp support, default enabled.
.TP
\fBchroot
Enable or disable chroot support, default enabled.
.TP
\fBbind
Enable or disable bind support, default enabled.
.TP
\fBnetwork
Enable or disable networking features, default enabled.
.TP
\fBrestricted-network
Enable or disable restricted network support, default disabled. If enabled,
networking features should also be enabled (network yes).
Restricted networking grants access to --interface and --net=ethXXX
only to root user. Regular users are only allowed --net=none.
.TP
\fBuserns
Enable or disable user namespace support, default enabled.
.TP
\fBx11
Enable or disable X11 sandboxing support, default enabled.
.TP
\fBfile-transfer
Enable or disable file transfer support, default enabled.
.SH FILES
/etc/firejail/firejail.config
.SH LICENSE
Firejail is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.
.PP
Homepage: http://firejail.wordpress.com
.SH SEE ALSO
\&\flfirejail\fR\|(1),
\&\flfiremon\fR\|(1),
\&\flfirecfg\fR\|(1),
\&\flfirejail-profile\fR\|(5)
\&\flfirejail-login\fR\|(5)
|
