Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs: note that blacklist/whitelist follow symlinks #5344

Merged
merged 2 commits into from
Aug 29, 2022
Merged

docs: note that blacklist/whitelist follow symlinks #5344

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
8e04409
docs: clarify symlink handling description in --whitelist
kmk3 Aug 28, 2022
c78c2b4
docs: note that blacklist/whitelist follow symlinks
kmk3 Aug 28, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 15 additions & 2 deletions src/man/firejail.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -190,6 +190,13 @@ Example:
Blacklist directory or file. File globbing is supported, see \fBFILE GLOBBING\fR section for more details.
.br

.br
Symbolic link handling: Blacklisting a path that is a symbolic link will also
blacklist the path that it points to.
For example, if ~/foo is blacklisted and it points to /foo, then /foo will also
be blacklisted.
.br

.br
Example:
.br
Expand Down Expand Up @@ -2922,8 +2929,14 @@ all directories in /usr.
.br

.br
Symbolic link handling: with the exception of user home, both the link and the real file should be in
the same top directory. For user home, both the link and the real file should be owned by the user.
Symbolic link handling: Whitelisting a path that is a symbolic link will also
whitelist the path that it points to.
For example, if ~/foo is whitelisted and it points to ~/bar, then ~/bar will
also be whitelisted.
Restrictions: With the exception of the user home directory, both the link and
the real file should be in the same top directory.
For symbolic links in the user home directory, both the link and the real file
should be owned by the user.
.br

.br
Expand Down