Skip to content

Commit

Permalink
Add precedence info to manpage & fix noblacklist example
Browse files Browse the repository at this point in the history
  • Loading branch information
smheidrich committed May 26, 2024
1 parent e25596b commit f502359
Showing 1 changed file with 25 additions and 0 deletions.
25 changes: 25 additions & 0 deletions src/man/firejail.1.in
Original file line number Diff line number Diff line change
Expand Up @@ -96,6 +96,13 @@ $ firejail [OPTIONS] firefox # starting Mozilla Firefox
.PP
# sudo firejail [OPTIONS] /etc/init.d/nginx start

When an option is specified multiple times (whether in a profile, on the
command line, or both) or conflicts with a related option, the
precedence/behavior is option-specific and usually documented in the
\fBOPTIONS\fR section below. Note that an option specified in a profile can
generally be disabled on the command line using \fB--ignore\fR.


.SH OPTIONS
.TP
\fB\-\-
Expand Down Expand Up @@ -1729,6 +1736,16 @@ See --keep-config-pulse.
Disable blacklist for this directory or file.
.br

Note that blacklist entries containing ${PATH} can not currently be partially
disabled for individual expanded paths. Only the whole unexpanded path
including ${PATH} can be disabled, which then applies to all expansions.
This limitation does not apply to expansions of other variables or wildcards.
For details, see
.UR https://github.com/netblue30/firejail/issues/6360
#6360
.UE
.br

.br
Example:
.br
Expand All @@ -1744,6 +1761,14 @@ $ exit
.br
$ firejail --noblacklist=/bin/nc
.br
bash: /bin/nc: Permission denied
.br
$ exit
.br

.br
$ firejail --noblacklist='${PATH}/nc'
.br
$ nc dict.org 2628
.br
220 pan.alephnull.com dictd 1.12.1/rf on Linux 3.14-1-amd64
Expand Down

0 comments on commit f502359

Please sign in to comment.