Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs: add precedence info to manpage & fix noblacklist example #6359

Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
25 changes: 24 additions & 1 deletion src/man/firejail.1.in
Original file line number Diff line number Diff line change
Expand Up @@ -95,7 +95,12 @@ $ firejail [OPTIONS] # starting the program specified in $SHELL,
$ firejail [OPTIONS] firefox # starting Mozilla Firefox
.PP
# sudo firejail [OPTIONS] /etc/init.d/nginx start

.PP
When an option is specified multiple times (whether in a profile, on the
command line, or both) or conflicts with a related option, the
precedence/behavior is option-specific and usually documented in the
\fBOPTIONS\fR section below. Note that an option specified in a profile can
generally be disabled on the command line using \fB--ignore\fR.
.SH OPTIONS
.TP
\fB\-\-
Expand Down Expand Up @@ -1729,6 +1734,16 @@ See --keep-config-pulse.
Disable blacklist for this directory or file.
.br

Note that blacklist entries containing ${PATH} can not currently be partially
disabled for individual expanded paths. Only the whole unexpanded path
including ${PATH} can be disabled, which then applies to all expansions.
This limitation does not apply to expansions of other variables or wildcards.
For details, see
.UR https://github.com/netblue30/firejail/issues/6360
#6360
.UE
.br

.br
Example:
.br
Expand All @@ -1744,6 +1759,14 @@ $ exit
.br
$ firejail --noblacklist=/bin/nc
.br
bash: /bin/nc: Permission denied
.br
$ exit
.br

.br
$ firejail --noblacklist='${PATH}/nc'
.br
$ nc dict.org 2628
.br
220 pan.alephnull.com dictd 1.12.1/rf on Linux 3.14-1-amd64
Expand Down