Skip to content

Commit

Permalink
docs: add precedence info to manpage & fix noblacklist example (#6359)
Browse files Browse the repository at this point in the history
Fixes #6358.
  • Loading branch information
smheidrich committed Jun 10, 2024
1 parent 533db20 commit 630972d
Showing 1 changed file with 24 additions and 1 deletion.
25 changes: 24 additions & 1 deletion src/man/firejail.1.in
Original file line number Diff line number Diff line change
Expand Up @@ -95,7 +95,12 @@ $ firejail [OPTIONS] # starting the program specified in $SHELL,
$ firejail [OPTIONS] firefox # starting Mozilla Firefox
.PP
# sudo firejail [OPTIONS] /etc/init.d/nginx start

.PP
When an option is specified multiple times (whether in a profile, on the
command line, or both) or conflicts with a related option, the
precedence/behavior is option-specific and usually documented in the
\fBOPTIONS\fR section below. Note that an option specified in a profile can
generally be disabled on the command line using \fB--ignore\fR.
.SH OPTIONS
.TP
\fB\-\-
Expand Down Expand Up @@ -1729,6 +1734,16 @@ See --keep-config-pulse.
Disable blacklist for this directory or file.
.br

Note that blacklist entries containing ${PATH} can not currently be partially
disabled for individual expanded paths. Only the whole unexpanded path
including ${PATH} can be disabled, which then applies to all expansions.
This limitation does not apply to expansions of other variables or wildcards.
For details, see
.UR https://github.com/netblue30/firejail/issues/6360
#6360
.UE
.br

.br
Example:
.br
Expand All @@ -1744,6 +1759,14 @@ $ exit
.br
$ firejail --noblacklist=/bin/nc
.br
bash: /bin/nc: Permission denied
.br
$ exit
.br

.br
$ firejail --noblacklist='${PATH}/nc'
.br
$ nc dict.org 2628
.br
220 pan.alephnull.com dictd 1.12.1/rf on Linux 3.14-1-amd64
Expand Down

0 comments on commit 630972d

Please sign in to comment.